1635 matches found
Joomla Event Manager 2.x Cross Site Scripting
Exploit Title : Joomla Event Manager comjem - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.joomlaeventmanager.net/download Category: Webapps Tested on: Win Version: 2.x Date: 2016/05/11 PoC: itemid=XSS Payload = "PersianHack Team Demo :...
i-Tech Nepal Radio CMS 2.0 SQL Injection
Exploit Title : i-Tech Nepal Radio CMS SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.itechnepal.com Google Dork : "Powered By : i-Tech Nepal" inurl:php? Date: 2016/04/26 Category: Webapps Tested on: Win /php Version : 2.0 Vulnerable Inputs: + alid + i...
Zarafe.net CMS 1.0 SQL Injection
Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...
Big Win NHL Hockey - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Big Win NHL Hockey published at the 'play' market has multiple vulnerabilities...
Big Win Football 2015 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Big Win Football 2015 published at the 'play' market has multiple vulnerabilities...
BIG WIN Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application BIG WIN Racing published at the 'play' market has multiple vulnerabilities...
BIG WIN Hockey - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application BIG WIN Hockey published at the 'play' market has multiple vulnerabilities...
Spin To Win Slots - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Spin To Win Slots published at the 'play' market has multiple vulnerabilities...
Lucky Win Casino™- FREE SLOTS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Lucky Win Casino™- FREE SLOTS published at the 'play' market has multiple vulnerabilities...
Big Win Slots™ - Slot Machines - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Big Win Slots™ - Slot Machines published at the 'play' market has multiple vulnerabilities...
Win 10 Launcher - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Win 10 Launcher published at the 'play' market has multiple vulnerabilities...
FBI Files Motion to Vacate Case Against Apple
Update The FBI has dropped its case filed a motion to vacate today’s scheduled court hearing and showdown over its demands that Apple help unlock a terrorist’s iPhone. The government late Monday afternoon filed a motion to vacate its case, likely putting a halt to a saga that began in mid-Februar...
蓝太平洋网站决策支持系统webeng~1.bz2配置文件下载漏洞
蓝太平洋网站决策支持系统WebEngine存在利用短文件漏洞下载明文系统配置文件可泄漏管理员明文密码等系统敏感配置信息 部分部署安装在win+apache环境下存在缺陷通过短文件漏洞实现利用。 配置文件中包涵了账号密码： poc导出的密码：...
WordPress Tubepress 2 Cross Site Scripting
^^^^^^^^^^^ ^ Exploit Title : Wordpress Tubepress Plugin v 2 Cross Site Scripting ^ Exploit Author : Ashiyane Digital Security Team ^ Vendor Homepage : https://wordpress.org/plugins/tubepress/ ^ Date: 13 Jan 2016 ^ Tested On : Win 10 | CyberFox Browser & Kali Linux | IceWeasel ^ ^^^^^^^^^^^ ^...
win-rar.com XSS vulnerability
Vulnerable URL: http://www.win-rar.com/buy/indexshop.php?AffID=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.02.2016 Latest check for patch:| 03.02.2016 02:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
phpFileManager 0.9.8 Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'phpFileManager 0.9.8 Remote Code Execution', 'Description' = %q This module exploits a remote code execution vulnerability in...
Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...
Siemens Ruggedcom WIN Vulnerability
OVERVIEW IOActive has coordinated with Siemens regarding multiple vulnerabilities in the Ruggedcom WIN firmware. Siemens has produced firmware updates that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely if there is network access to the affected service. AFFECT...
win-city.be XSS vulnerability
Vulnerable URL: http://www.win-city.be//search/site/?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Coordinat...