vBulletin 4.2.0 ChangUonDyU Chatbox 3.6.0 Cross Site Scripting

Exploit Title : vBulletin 4.2.0 ChangUonDyU Chatbox Plugins 3.6.0 Cross Site Scripting Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepages : vbulletin.com vietvbb.vn Software Download Link : vietvbb.vn/up/showthread.php?t=40346&page=3...

DomainMOD 4.11.01 ssl-accounts.php Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'ssl-accounts.php username' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 19-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link :...

DomainMOD 4.11.01 Registrar Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and beore - Registrar Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod Software...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

Exploit Title : Joomla Furniture Virtuemart Templates 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : ordasoft.com Software Download Link : ordasoft.com/download-furniture-joomla-virtuemart-template Software...

MyBB 1.6.x ChangUonDyU Chatbox 3.6.0 Cross Site Scripting

Exploit Title : MyBB 1.6.x ChangUonDyU Chatbox Plugins 3.6.0 Cross Site Scripting Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : mybb.com Software Download Link : destek.mybb.com.tr/attachment.php?aid=742 Software Information Links ...

MeteoTemplate 17.1 Nectarine stationExtremes 2.0 Open Redirection

Exploit Title : MeteoTemplate 17.1 Nectarine stationExtremes Plugins 2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : meteotemplate.com Software Download Link :...

WordPress NativeChurch Multi-Purpose 5.0.x File Download

Exploit Title : WordPress NativeChurch Multi-Purpose Themes 5.0.x Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : themeforest.net Software Information Link :...

Joomla BookingCalendarForJoomla 3.4.0 SQL Injection

Exploit Title : Joomla BookingCalendarForJoomla 3.4.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : joomlabookingcalendar.com availabilitycalendar.com Software Information Link :...

Zarr Software Warwickshire 1.x Open Redirection

Exploit Title : Zarr Software Warwickshire 1.x Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : zarr.com Software Information Links : zarr.com/bespoke-website-development/ zarr.com/cloud-solutions/...

AsureForce Time 12.0 Open Redirection

Exploit Title : AsureSoftware AsureForce Time Version 12.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : asuresoftware.com Software Information Link : asuresoftware.com/products/time-attendance/ Software Version :...

MeteoTemplate 17.1 Nectarine Deviations Open Redirection

Exploit Title : MeteoTemplate 17.1 Nectarine Deviations Plugins 2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : meteotemplate.com Software Download Link :...

Joomla ChronoForms 6.0.17 SQL Injection

Exploit Title : Joomla ChronoForms Components 6.0.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : chronoengine.com Software Download Link : chronoengine.com/chronoforms Software Information Link :...

Joomla SpiderCalendar 3.2.17 SQL Injection

Exploit Title : Joomla SpiderCalendar Components 3.2.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : web-dorado.com Software Download Link : web-dorado.com/products/joomla-calendar.html Software Information Link :...

Going1up The Newspaper CMS 1998-2019 1.x Open Redirection

Exploit Title : 1up! Software Going1up The Newspaper CMS 1998-2019 1.x Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : going1up.com Software Information Link : going1up.com/main.asp?SectionID=4&SubSectionID=16 Softwa...

HanYazilim Paper Submission System .NET 1.0 Shell Upload

Exploit Title : HanYazilim Paper Submission System .NET v1.0 Privilege Escalation / Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 22/02/2019 Vendor Homepage : hanyazilim.com Software Information Link : hanyazilim.com/hakemlimakaletakipsistemi.pdf...

Typo3 CMS Modern Guestbook tx_veguestbook_pi1 3.3.0 SQL Injection

Exploit Title : Typo3 CMS Modern Guestbook txveguestbookpi1 3.3.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/02/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/veguestbook/3.3.0/zip/ Softwar...

Joomla AdsManager 3.2.0 CSRF / Database Disclosure / SQL Injection

Exploit Title : Joomla AdsManager Components 3.2.0 CSRF / RFI / Backdoor Access / SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/02/2019 Vendor Homepage : joomprod.com juloa.com Software Download Link :...

XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications !-- Exploit Title: Cross Site Scripting in XAMPP 5.6.8 and previous Date: 17-02-2019 Exploit Author: Rafael Pedrero Vendor Homepage: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/5.6.8/ Software Link:...

HotelDruid 2.3 Cross Site Scripting

=========================================================================================== Exploit Title: Hoteldruid 2.3 - 'nsextt' XSS Injection CVE: CVE-2019-8937 Date: 18-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/hoteldruid/ Software Link:...

HotelDruid 2.3 - Cross-Site Scripting

HotelDruid 2.3 - Cross-Site Scripting =========================================================================================== Exploit Title: Hoteldruid 2.3 - 'nsextt' XSS Injection CVE: CVE-2019-8937 Date: 18-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...