40 matches found
master-chisto78.ru Improper Access Control vulnerability OBB-2266481
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for SQL Injection in Fauzantrif_Election_Project Fauzantrif_Election
eLection-TriPath...
PMS 0.42 Stack-Based Buffer Overflow Exploit
Exploit for linux platform in category dos / poc Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer local module Tested on: Kali i686 GNU/Linux Description: PMS 0.42 is prone to a local unauthenticated stack-based overflow The vulnerability is...
NetCracker Resource Management System 8.0 SQL Injection
Vulnerability type: SQL Injection Vendor: http://www.netcracker.com/ Product: NetCracker Resource Management System Affected version: = 8.0 Patched version: 8.2 Credit: Foo Jong Meng, Chia Junyuan, Benjamin Tan CVE ID: CVE-2015-3423 PROOF OF CONCEPT SQLi SQL Injection SQLi vulnerability in multip...
CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...
UNIT4 Prosoft HRMS 8.14.230.47 Cross Site Scripting
Vulnerability type: Cross-site Scripting Vendor: http://www.unit4.com/ Product: UNIT4 Prosoft HRMS Product site: http://www.unit4apac.com/products/prosofthrms Affected version: 8.14.230.47 Fixed version: 8.14.330.43 Credit: Jerold Hoong & Edric Teo PROOF OF CONCEPT The login page of UNIT4's Proso...
ANE CMD CRSF - Add Admin
No description provided by source. ======================================================================= AneCMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company...
Anantasoft Gazelle CMS CSRF Vulnerability
No description provided by source. ======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email...
CMS Made Simple 1.7 CSRF Vulnerability
No description provided by source. Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software CMS Made Simple 1.7 Category CMS / Portals Site p4ge http://server/demo/2/10/CMSMadeSimple Plateform php Greetz to Gaurav, Prateek, Vivek, Sanja...
Eshbel Priority MarketGate module Cross Site Scripting Vulnerability
========================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Eshbel Priority MarketGate module Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== Priority’s ERP The features listed belo...
Websense Email Security DoS
No description provided by source. Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de...
Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ================================================================== Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability ==================================================================...
Opera 9.62 (opera:allinone) Remote Code Execution Exploit PoC
No description provided by source. !-- OPERA 9.62 Remote Code Execution Vulnerability Found By NeoCoderz Email : NeoCoderz1atmsndotcom -- html script function execcalc var abc="c:\\windows\\system32\\calc.exe"; window.open'opera:config?q=q=%2A"img src='x' onerror='evalabc'&p=1&s=1';...
nokia-dos.txt
Nokia N95 cellphone remote DoS using the SIP Stack Severity: High Denial of Service Hardware: Nokia N95 Firmware: Tested version: Nokia RM-159 V 12.0.013 Notification: Vulnerability found: 11 September 2007 Contact Nokia Support: 12 September 2007 / None reply Contact Nokia Security Support: 19...
BBPortalS <= 2.0 Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== BBPortalS get$sql; if!$res - content = /Warning/ print " The Current number of fields is : $err\n"; $err++; max007; else if$err=...
Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Pagetool CMS = 1.07 ptupload.php Remote File Include Vulnerability ====================================================================== !usr/bin/perl use...
seditio110-sql.txt
--Security Report-- Advisory: Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL...
Echo Security Advisory 2006.57
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV57$2006 ----------------------------------------------------------------------------------------------- ECHOADV57$2006Soholaunch Pro =4.9 r36 Multiple Remote File Inclusion Vulnerability...
perForms Mambo Component <= 1.0 Remote File Inclusion
No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...
[Full-disclosure] Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.
--Security Report-- Advisory: My Gaming Ladder Combo System = 7.0 Remote File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 22/04/06 13:37 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MyGamingLadder...