MLMPro 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Matrix MLM Script 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://royallifefoundation.org/ Software Link: https://codecanyon.net/item/mlmpro-multistage-forced-matrix-mlm-script/23050292 Version: 1.0...

Shield CMS 2.2 - email SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SHIELD - Freelancer Content Management System 2.2 - SQL Injection / CSRF Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/shield-content-management-system/18833498 Versio...

Matrix MLM Script 1.0 SQL Injection Vulnerability

Matrix MLM Script version 1.0 suffers from a remote SQL injection vulnerability. Exploit Title: Matrix MLM Script 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://royallifefoundation.org/ Software Link:...

elFinder <= 2.1.44 Information Disclosure Vulnerability

elFinder is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:std42:elfinder";...

Adapt Inventory Management System 1.0 - SQL Injection

Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.adaptinventory.com/ Software Link: https://codecanyon.net/item/adapt-inventory-management-system/22838514 Version: 1.0 Category: Webapps Tested...

Event Locations 1.0.1 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Event Locations 1.0.1 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/event-locations-phpmysql-plugin/22100679 Version: 1.0.1 Category: Webapps Tested on...

bypass-firewalls-by-DNS-history - Firewall Bypass Script Based On DNS History Records

This script will try to find: the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ... an old server which still running the same inactive and unmaintained website, not receiving active traffic because the A DNS record is not pointing towards it. Because it's an...

Detecting Insecure Cookies with Qualys Web Application Scanning

Cookies are ubiquitous in today's modern web applications. If an attacker can acquire a user's session cookie by exploiting a cross-site scripting XSS vulnerability, by sniffing an unencrypted HTTP connection, or by some other means, then they can potentially hijack a user's valid session...

Architectural CMS 1.0 SQL Injection

Exploit Title: Architectural Cms 1.0 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/architectural-multipage-theme-admin-panel/20968597 Version: 1.0 Category: Webapps Tested on:...

Matrix MLM Script 1.0 - Information Disclosure

Matrix MLM Script 1.0 - Information Disclosure Exploit Title: Matrix MLM Script 1.0 - Information Leakage Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://royallifefoundation.org/ Software Link:...

Architectural 1.0 - 'email' SQL Injection

Exploit Title: Architectural Cms 1.0 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/architectural-multipage-theme-admin-panel/20968597 Version: 1.0 Category: Webapps Tested on:...

CVE-2018-0698

CVE-2018-0698 affects WESEEK/GROWI up to v3.2.3, where a cross-site scripting (XSS) vulnerability could allow remote attackers to inject arbitrary script via unspecified vectors. The issue is documented across multiple sources (NVD, JVN and CVE listings) with the impact described as arbitrary scr...

ThreatList: WordPress Vulnerabilities Up 30 Percent in 2018

UPDATE Vulnerabilities in popular content management system CMS WordPress are growing at a rapid rate, up 30 percent in 2018, according to new web application bug research released Wednesday. Researchers at Imperva said that in 2018, they continued to see a trend of increasing web application...

Microsoft .NET Framework and .NET Core Information Disclosure Vulnerability

NET Framework and .NET Core are both products of Microsoft Corporation.Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building applications for Windows, Windows Store, Windows Server, and Microsoft Azure. NET Framework is a comprehensive...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2019-16189)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core version 2.1,...

Microsoft .NET Framework Information Disclosure Vulnerability (KB4480059)

This host is missing an important security update according to Microsoft KB4480059 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2019-16191)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core versions 2.2...

Microsoft .NET Framework Information Disclosure Vulnerability (KB4480057)

This host is missing an important security update according to Microsoft KB4480057 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework Information Disclosure Vulnerability (KB4480063)

This host is missing an important security update according to Microsoft KB4480063 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

.NET Framework Information Disclosure Vulnerability

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing CORS configurations. An attacker who successfully exploited the vulnerability could retrieve content, that is normally restricted, from a web application. The securi...