CVE-2022-25220

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding...

CVE-2022-23051

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svgfile' parameter...

CVE-2022-23052

PeteReport Version 0.5 contains a Cross Site Request Forgery CSRF vulnerability allowing an attacker to trick users into deleting users, products, reports and findings on the application...

PwnXSS - Vulnerability XSS Scanner Exploit

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Commands: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usage Basic usage: python3 pwnxss.py -u...

UPDATE: Covenant v0.5

Covenant v0.5, a major update was released a few hours ago. My last post about this open source, collaborative .NET C2 framework for red teamers was about Covenant v0.4. This is a major update and includes a brand new .NET Core cross-platform implant “Brute” that can be run on Windows, Linux, or...

Rips Scanner v0.5-function.php文件-本地文件包含漏洞

No description provided by source...

WM-News <= 0.5 - Multiple Remote File Include Vulnerabilities

No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- WM-News v0.5 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=203 Script : WM-News v0.5 Credits : ERNE Contact : [email protected] and irc.gigachat.net kurdhack Thanks :...

[Patator v0.5] Multi-purpose brute-forcer, with a modular design and a flexible usage

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Currently it supports the following modules: ftplogin : Brute-force FTP sshlogin : Brute-force SSH telnetlogin : Brute-force Telnet smtplogin : Brute-force SMTP smtpvrfy : Enumerate valid users using the SMTP VRF...

Siche Search v.0.5 Zerboard Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Introduction: ============= Siche search v.0.5 for Zerboard is search module to known CMS named Zeroboard Copy of the Vendor Homepage: http://eos.pe.kr Abstract: ========...

PHPhotoalbum v0.5 SQL Injection Vulnerability

No description provided by source. Title: PHPhotoalbum Remote sql injection Vulnerability Tested on: windows http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+user+from+mysql.user-- http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+loadfile/directory...

PHPhotoalbum v0.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================= PHPhotoalbum v0.5 SQL Injection Vulnerability ============================================= Title: PHPhotoalbum Remote sql injection Vulnerability Tested on: windows...

SimpleLoginSys 0.5 - Authentication Bypass

SimpleLoginSys v0.5 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplesiteadmin/files/simpleloginsys/SimpleLoginSys%20v0.5/simpleloginsys0.5.zip/download + SQL Injection Auth Bypass -...

PHPhotoalbum 0.5 - Multiple SQL Injections

PHPhotoalbum 0.5 - Multiple SQL Injections Name : PHPhotoalbum v0.5 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dork : intext:PHPhotoalbum v0.5 Greetz : ZaBeaTy, str0ke, TBH, Hawk, doctor, Sandtalker, Avantura ; Proof of Concept :...

phphotoalbum-sql.txt

Name : PHPhotoalbum v0.5 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dork : intext:PHPhotoalbum v0.5 Greetz : ZaBeaTy, str0ke, TBH, Hawk, doctor, Sandtalker, Avantura ; Proof of Concept :...

DreamLog 0.5 (upload.php) Arbitrary File Upload Exploit

No description provided by source. ? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

dreamlog-upload.txt

? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- !...

wmnews05.txt

ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- WM-News v0.5 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=203 Script : WM-News v0.5 Credits : ERNE Contact : [email protected] and irc.gigachat.net kurdhack Thanks : BLaCKWHITE, B0tan, FearLesS, B3g0k,...

WM-News v0.5 - Remote File Include Vulnerabilities

ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- WM-News v0.5 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=203 Script : WM-News v0.5 Credits : ERNE Contact : [email protected] and irc.gigachat.net kurdhack Thanks : BLaCKWHITE, B0tan, FearLesS, B3g0k,...

WM-News &lt;= 0.5 Multiple Remote File Include Vulnerabilities

No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- WM-News v0.5 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=203 Script : WM-News v0.5 Credits : ERNE Contact : [email protected] and irc.gigachat.net kurdhack Thanks :...

WM-News <= 0.5 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== WM-News = 0.5 Multiple Remote File Include Vulnerabilities =========================================================== ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- WM-News v0.5 -...