Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal

Exploit Title: Trend Micro Data Loss Prevention Virtual Appliance 5.2 Web Path Traversal Date: 10/11/2017 Exploit Author: Leonardo Duarte Contact: http://twitter.com/etakdc Vendor Homepage: http://la.trendmicro.com/la/productos/data-loss-prevention/ Version: 5.2 Tested on: Debian 9 Category:...

Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal

Trend Micro Data Loss Prevention Virtual Appliance 5.2 - Path Traversal Exploit Title: Trend Micro Data Loss Prevention Virtual Appliance 5.2 Web Path Traversal Date: 10/11/2017 Exploit Author: Leonardo Duarte Contact: http://twitter.com/etakdc Vendor Homepage:...

EPESI 1.8.2 rev20170830 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Multiple Stored XSS in EPESI Date: 10/03/2017 Exploit Author: Zeeshan Shaikh Vendor Homepage: http://epe.si/ Software Link: http://epe.si/download/ Version: 1.8.2 rev20170830 CVE : CVE-2017-14712 to CVE-2017-14717 Category:...

EPESI 1.8.2 Revision 20170830 Cross Site Scripting

Exploit Title: Multiple Stored XSS in EPESI Date: 10/03/2017 Exploit Author: Zeeshan Shaikh Vendor Homepage: http://epe.si/ Software Link: http://epe.si/download/ Version: 1.8.2 rev20170830 CVE : CVE-2017-14712 to CVE-2017-14717 Category: webapps XSS 1 Tasks - Title Steps to recreate: 1...

WordPress WPHRM Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin WPHRM - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wphrm-human-resource-management-system-for-wordpress/20555857 Demo:...

ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Exploit Title: ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Dork: N/A Date: 29.09.2017 Vendor Homepage: https://codecanyon.net/user/lemonadeflirt...

HBGK DVR 3.0.0 Build 20161206 Authentication Bypass

Exploit Title: HBGK DVR V3.0.0 build20161206 - Authentication Bypass Date: 24-09-2017 Vendor Homepage: http://www.hbgk.net/en/ Exploit Author: RAT - ThiefKing Contact: https://www.facebook.com/cctvsuperpassword Website: http://tromcap.com Category: webapps Tested on: V2.3.1 build20160927, V3.0.0...

ConverTo Video Downloader And Converter 1.4.1 Arbitrary File Download

Exploit Title: ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Dork: N/A Date: 29.09.2017 Vendor Homepage: https://codecanyon.net/user/lemonadeflirt Software Link: https://codecanyon.net/item/converto-video-downloader-converter/13225966 Demo: http://vd.googglet.com/ Version:...

Sokial Social Network Script 1.0 SQL Injection Vulnerability

Sokial Social Network Script version 1.0 suffers from a remote SQL injection vulnerability. Exploit Title: Sokial Social Network Script 1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.sokial.net/ Software http://www.sokial.net/demonstrations-social-network.sk Demo:...

iStock Management System 1.0 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: iStock Management System 1.0 - Arbitrary File Upload Dork: N/A Date: 29.09.2017 Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/istock-management-system/20405084 Demo:...

Joomla Zh YandexMap 6.1.1.0 SQL Injection Vulnerability

Joomla Zh YandexMap extension version 6.1.10 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla! Component Zh YandexMap 6.1.1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://zhuk.cc/ Software Link:...

tPanel 2009 SQL Injection Vulnerability

tPanel 2009 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: tPanel 2009 - Authentication Bypass Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/hosting/tpanel/...

SoftDatepro Dating Social Network 1.3 SQL Injection Vulnerability

SoftDatepro Dating Social Network version 1.3 suffers from a remote SQL injection vulnerability. Exploit Title: SoftDatepro Dating Social Network 1.3 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.softdatepro.com/ Software Link:...

Same Sex Dating Software Pro 1.0 SQL Injection Vulnerability

Same Sex Dating Software Pro version 1.0 suffers from a remote SQL injection vulnerability. Exploit Title: Same Sex Dating Software Pro 1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.softdatepro.com/ Software Link:...

PG All Share Video 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PG All Share Video 1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.pilotgroup.net/ Software Link: http://www.allsharevideo.com/features.php Demo: http://demo.allsharevideo.com/ Version: 1.0 Category:...

iTech Gigs Script 1.21 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTech Gigs Script 1.21 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category:...

Joomla NS Download Shop 2.2.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component NS Download Shop 2.2.6 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: https://nswd.co/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/paid-downloads/ns-downloadshop/...

PHP CityPortal 2.0 SQL Injection Vulnerability

PHP CityPortal version 2.0 suffers from a remote SQL injection vulnerability. Exploit Title: PHP CityPortal 2.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo...

iProject Management System 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iProject Management System 1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/iproject-management-system/20483358 Demo: http://project.ikodes.com/ikpms/...

MyBuilder Clone 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category:...