Wapoweb SQL Injection

SQL Injection on Wapoweb Risk: High CWE number: CWE-89 Date: 19/04/2014 Vendor: www.wapoweb.net Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: prodotti.php Exploit: http://www.site.com/prodotti.php?c=SQLI...

Indeziner CMS Cross Site Scripting

Cross Site Scripting on INDEZINER CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: indeziner.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: vendorprofile.php Exploit: http://host/vendorprofile.php?vendorid=xss PoC: - Target:...

CMS Morpheus SQL Injection

SQL Injection on CMS Morpheus Risk: High CWE number: CWE-89 Date: 19/04/2014 Vendor: www.pixel-dusche.de Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://www.site.com/index.php?cid=SQLI...

DuBose Web Group CMS Cross Site Scripting

Cross Site Scripting on DuBose Web Group CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: www.duboseweb.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: product.php Exploit: http://host/path/product.php?pname=xss PoC: - Target:...

CMS Studio Cross Site Scripting

Multiple Cross Site Scripting on CMS STUDIO Risk: Low CWE number: CWE-79 Date: 15/04/2014 Vendor: www.cmsstudio.info Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://host/index.php?spageid=xss...

CMS iCAT Cross Site Scripting

Cross Site Scripting on CMS iCAT Risk: Low CWE number: CWE-79 Date: 15/04/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /index.php Exploit: http://host/index.php?seite=xss PoC: - Target: partner.ruegg-cheminee.com - Vuln. File:...

Joomla Wrapper Cross Site Scripting

Cross Site Scripting on Joomla "comwrapper" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comwrapper&itemid= Exploit: -Target: http://host.com -Vuln. Fil...

Joomla SMF Cross Site Scripting

Cross Site Scripting on Joomla "comsmf" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comsmf&itemid= Exploit: -Target: http://host.com -Vuln. File:...

CMS Int24 SQL Injection

SQL Injection on CMS int24 Risk: High CWE number: CWE-89 Date: 14/04/2014 Vendor: www.int24.com.pl Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: galeria.php Exploit: http://host/galeria.php?cid=SQLI...

Joomla BeaconDecode Cross Site Scripting

Cross Site Scripting on Joomla "combeacondecode" Risk: Low CWE number: CWE-79 Date: 14/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=combeacondecode&task= Exploit: - Target: http://site.com -...

PrestaShop 1.5.6.2 Cross Site Scripting

Cross Site Scripting on E-Commerce PrestaShop Risk: Low CWE number: CWE-79 Date: 09/04/2014 Vendor: www.prestashop.com Version: PrestaShop 1.5.6.2 Author: Felipe "Renzi" Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: product.php Exploit:...

CMS United Cross Site Scripting

Cross Site Scripting on CMS United Risk: Low CWE number: CWE-79 Date: 09/04/2014 Vendor: www.cmsunited.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /home.php Exploit: http://host/home.php?id=xss PoC: - Target: www.ralphvanmanen.nl -...

CMS eaZy SQL Injection

SQL Injection on CMS eaZy Risk: High CWE number: CWE-89 Date: 09/04/2014 Vendor: www.eazycms.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /index.php Exploit: http://host/index.php?tab=SQLI...

WebLife CMS SQL Injection

Mulitple SQL Injection on WebLife CMS Risk: High CWE number: CWE-89 Date: 09/04/2014 Vendor: www.weblife.sk Author: Felipe "Renzi" Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://host/index.php?jazyk=SQLI http://host/index.php?page=SQLI PoC:...

Microsoft File Handling Component Remote Code Execution Vulnerability (2922229)

This host is missing an important security update according to Microsoft Bulletin MS14-019. OpenVAS Vulnerability Test $Id: gbms14-019.nasl 6750 2017-07-18 09:56:47Z teissa $ Microsoft File Handling Component Remote Code Execution Vulnerability 2922229 Authors: Shakeel Copyright: Copyright C 2014...

Windows XP End of Life Breeding FUD, Legit Concerns

For those of you anticipating the start of a Walking Dead-style malware apocalypse next Tuesday, calm yourselves. The official end of security support for Windows XP is upon us, but it’s important to check some anxiety at the door and keep some perspective. “I’ve been a forensics investigator 14...

Linkedin Password Decryptor - Linkedin Password Recovery Software

Linkedin Password Decryptor is the all-in-one software to recover Linkedin passwords stored by popular Web Browsers. These days, most of the web browsers store the website login passwords to prevent hassale of entering the password again and again. Each web browser use their own encryption...

VirusTotal Scanner - Desktop Tool to Perform Quick Anti-virus Scan using VirusTotal

VirusTotal Scanner is the desktop tool to quickly perform Anti-virus scan using VirusTotal.com VirusTotal.com is a free online scan service that analyzes suspicious files using 40+ Anti-virus applications. It facilitates the quick detection of viruses, worms, trojans, all kinds of malware and...

KCFinder 2.53 Shell Upload

Exploit Title : KCFinder Upload Shell Vulnerability + Google Dork : inurl:/kcfinder/browse.php + Date : 24/04/2014 + Exploit Author : IranianDarkCodersTeam + Home : http://www.idc-team.net + Discovered By : Black.Hack3r + Vendor Homepage : http://kcfinder.sunhater.com/ + Version : 2.51 - 2.53 +...

Microsoft Admits Spying on Hotmail Account to track Source of Windows 8 leak

Earlier this week, Microsoft admitted that they have accessed a French Blogger's private Hotmail account to identify a former Microsoft employee who had leaked the company's trade secrets in 2012. Microsoft defined this private investigation as part of "Protecting our customers and the security a...