Advanced Matrimonial Script 2.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advanced Matrimonial Script v2.0.3 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/advanced-matrimonial/ Demo:...

MLM Forced Matrix 2.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MLM Forced Matrix v2.0.7 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-forced-matrix/ Demo: http://74.124.215.220/forctrix/...

Invalid password "nsgslbautosync: unable to establish master SSH connection: master process exited"

After changing the RPC passwords on our Netscalers, GSLB synchronization fails. Reverting to the default passwords allows GSLB sync to function. A non-default password is desired. Errors in the ns.log: "nsgslbautosync: Error executing command on gslb site...Reason: Error: Invalid username or...

Wordpress < 4.7.1 - Username Enumeration (CVE-2017-5487)

Author: p0wd3r know Chong Yu 404 security lab Date: 2017-03-05 0x00 vulnerability overview Vulnerability description Recently exploit-db is published on a Wordpress 4.7.1 username enumeration vulnerabilities: , in fact, the vulnerability to 1-month 14, has been posted on the Internet, and given t...

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

DEBIAN-CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

UBUNTU-CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

Authentication flaw

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...

Wordpress 4.7.1 - Username Enumeration Exploit

Exploit for php platform in category web applications !usr/bin/php 0day.today 2018-04-06...

WordPress Core < 4.7.1 - Username Enumeration

!usr/bin/php...

Automattic: Authentication Bypass - Chaining two vulnerabilities leads to account takeover at en.instagram-brand.com

Product / URL https://en.instagram-brand.com/wp-json/brc/v1/login/ Description and Impact An attacker can perform account takeover by leveraging following two vulnerabilities: Auth Bypass = Username Enumeration + Login Brute Force A. Username Enumeration: ------------------------------- For the...

Siklu EtherHaul < 7.4.0 Remote Command Execution Vulnerability

Exploit for hardware platform in category remote exploits + Credits: Ian Ling + Website: iancaling.com + Source: http://blog.iancaling.com/post/155127766533 Vendor: ================= https://www.siklu.com/ Product: ====================== -Siklu EtherHaul EH- Vulnerability Details:...

CVE-2017-2684

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication...

Advantech WebAccess 8.1 Post Authentication Credential Collector Exploit

Usage Info msf use auxiliary/gather/advantechwebaccesscreds msf auxiliaryadvantechwebaccesscreds show actions ...actions... msf auxiliaryadvantechwebaccesscreds set ACTION msf auxiliaryadvantechwebaccesscreds show options ...show and set options... msf auxiliaryadvantechwebaccesscreds run This...

DEBIAN-CVE-2016-8652

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service crash by aborting authentication without setting a username...

CVE-2016-8652

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service crash by aborting authentication without setting a username...

GOsa Cross-Site Scripting Vulnerability

GOsa is a set of LDAP front-end tools for managing users. A cross-site scripting vulnerability exists in the 'displayLogin' function of the html/index.php file in GOsa. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a username...

CVE-2016-8361

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication...