740 matches found
Sitracker SIT File Upload
This module combines two separate issues within Support Incident Tracker = 3.65 application to upload arbitrary data and thus execute a shell. The two issues exist in ftpuploadfile.php. Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress WP Mobile Edition File Disclosure
File disclosure vulnerability in WordPress WP Mobile Edition plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
OpenX 2.8.6 File Upload
File upload vulnerability in OpenX ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Windows)
Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Joomla Component com_hsconfig 1.5 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_datafeeds 880 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
ExtCalendar 2.0 Authentication bypass
Authentication bypass vulnerability in Extcalendar Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Apache Flink Directory Traversal
Directory traversal vulnerability in Apache Flink Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Skybluecanvas 1.1 RCE
Remote command execution vulnerability in Skybluecanvas Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Novell ZENworks Configuration Management 11 SP2 File Upload
File upload vulnerability in Novell ZENworks Configuration Management Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
House Style 0.1.2 File Disclosure
File disclosure vulnerability in House Style Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Exponent CMS 0.96.3 SQLi
Exponent CMS 0.96.3 articlemodule SQL Injection Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
osCommerce 2.3.1 File Upload
Remote file upload vulnerability in osCommerce bannermanager.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Piwik 0.6.3 LFI
Local file include vulnerability in Piwik format parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Horde RCE
Horde unauthorized backdoor 11/11 - 02/12 Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Wordpress LISL Last Image Slider 1.0 File Upload
File upload vulnerability in Wordpress LISL Last Image Slider plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress A Gallery 0.9 File Upload
File upload vulnerability in Wordpress A Gallery plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla Component com_vjvideo 1.0 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Dell SonicWALL Secure Remote Access diagnostics RCE
Remote command execution vulnerability in Dell SonicWALL Secure Remote Access /cgi-bin/diagnostics Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
vBSEO 3.6.0 functions_vbseo_hook.php Referer RCE
Remote command execution vulnerability in vBSEO functionsvbseohook.php Referer Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
OpenEMR 4.1.2 forms_admin.php SQL Injection
SQL Injection vulnerability in OpenEMR formsadmin.php id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
vtiger CRM 5.4.0 get_tickets_list SQLi
SQL Injection vulnerability in vtiger CRM getticketslist SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Apache OFBiz 10.04.01 RCE (Windows)
Remote command execution vulnerability in ApacheOFBiz FlexibleStringExpander Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Phpmyadmin Backdoor RCE
PhpMyAdmin Backdoor Arbitrary Command Execution Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Joomla Component com_addressbook 1.5.0 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_weberpcustomer 1.2.1 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_obsuggest < 1.8 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Typo3 FD
type a short description of the vulnerability here Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Citrix NetScaler SD-WAN RCE
Remote command execution vulnerability in Citrix NetScaler SD-WAN Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Solarwinds Storage Manager ProcessFileUpload.jsp File Upload
File upload vulnerability in Solarwinds Storage Manager ProcessFileUpload.jsp Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress Google Document Embedder 2.5.14 SQL Injection
SQL Injection vulnerability in Google Document Embedder gpid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Asus Wireless-N Gigabit Router Information Disclosure
Remote administrator password Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Apache-Struts IncludeParams < 2.3.14.1 RCE Linux
Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Symantec Web Gateway 5.0.3 SQLi
SQL Injection vulnerability in Symantec Web Gateway search.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Magento File Disclosure
XML external entity vulnerability api/xmlrpc Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Wordpress Video Embed & Thumbnail Generator 1.1 RCE (Linux)
Remote code execution vulnerability in Wordpress Video Embed & Thumbnail Generator plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Wordpress Cms Pack 1.3 File Upload
File upload vulnerability in Wordpress Cms Pack plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla Component com_advertising 0.25 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Apache Axis2 File Disclosure
File disclosure vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Joomla Component com_jotloader 2.2.1 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Awstats Totals <= 1.14 RCE
RCE via sort field Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
TYPO3 4.5.8/4.6.1 RFI
Remote file inclusion in Typo3 in the workspaces system extension AbstractController.php Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...
phpBB alltopics.php SQLI
phpBB alltopics.php SQLI Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
TerraMaster Operating System SQL Injection
SQL Injection vulnerability in TerraMaster Operating System Event parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Symantec Web Gateway 5.2.2 RCE
Remote command execution vulnerability in Symantec Web Gateway newwhitelist.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
ZonPHP 2.25 File Upload
File upload vulnerability in ZonPHP ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Nuked-klaN 1.7.7 / SP4.4 SQL injection
Nuked-klaN = 1.7.7 / = SP4.4 SQL Injection via Referer header Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Apache Roller OGNL Injection
This module exploits an OGNL injection vulnerability in Apache Roller 5.0.2. The vulnerability is due to an OGNL injection on the UIAction controller because of an insecure usage of the ActionSupport.getText method. Vulnerability Type: Remote Command Execution For the exploit source code contact...