Arachni v0.2.1 - penetration testers Framework - latest release

"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...

OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================================== OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...

Diggersolutions Newsletter - Remote File Upload Vulnerabilities

Exploit for php platform in category web applications =============================================================== Diggersolutions Newsletter - Remote File Upload Vulnerabilities ===============================================================...

Easyreplicasrl - Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Easyreplicasrl - Remote SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

CubeCart 2.0.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== CubeCart 2.0.1 SQL Injection Vulnerability ========================================== My + Author : XAviaTiqueX fr0m OS-TEAM Contact : email protected + Greats T0: YasMouh , M.K , ArGon HaCKer ,...

Customer Paradigm <= (product.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Customer Paradigm Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0...

411cc - Multiple SQL Injections

411cc - Multiple SQL Injections =================================================================== 411CC e-Commerce = String' SQL Injection Vulnerabilities =================================================================== My + Author : KnocKout Contact : [email protected] Software info Web App...

WebMage <= Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ WebMage Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout member from...

WikiWebHelp 0.3.3 Insecure Cookie Handling

=============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software: http://sourceforge.net/projects/wwh/ Vendor :...

Chipmunk Pwngame - Multiple SQL Injections

Chipmunk Pwngame - Multiple SQL Injections =================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB...

xWeblog 2.2 SQL Injection

=================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software: http://www.aspdunyasi.com/goster.asp?id=1...

xWeblog v2.2 (oku.asp?makale_id) SQL Injection Vulnerability

No description provided by source. =================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software:...

Dalogin 2.2 Cross Site Scripting / File Disclosure / SQL Injection

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

Google Releases Web App Security Course

Google has released a new online training course for Web application developers designed to teach them how to avoid common programming mistakes that lead to vulnerabilities such as cross-site scripting, cross-site request forgery and others. The course, which is part of the company’s Google Code...

FCKEditor 2.0 RC3 Shell Upload

FCKEditor Shell Upload Exploit ------------------------------ Web-App: FCKEditor. Version: Version 2.0 RC3 Release Candidate 3. Link : http://sourceforge.net/projects/fckeditor/files/FCKeditor/ Author : Aodrulez. Email : [email protected] Vulnerable File : -----------------...

LineWeb Local File Inclusion / SQL Injection

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

Multiple vulnerabilities in LineWeb 1.0.5

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

An enterprise Web application upload vulnerability-vulnerability warning-the black bar safety net

Author: Dragon shadow VS hx dragons Looks like Is a very old program even in the Baidu and Google didn't find a program today next to the Note When or unintentionally found that the use of this program website google. the cn keyword inurl:zhaoshang. asp? bid search to 5 6 Article 3 of the results...

PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD

Exploit for unknown platform in category web applications ================================================= PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD ================================================= The PoC: 1.- Preview This web APP is Vulnerable to xss in its instalation file but you ca...

html2ps 'include file' Server Side Include Directive Directory Traversal

Exploit for unknown platform in category web applications ======================================================================== html2ps 'include file' Server Side Include Directive Directory Traversal Vulnerability ========================================================================...