4 TOTOLINK Router Models - Cross-Site Request Forgery Cross-Site Scripting

4 TOTOLINK Router Models - Cross-Site Request Forgery Cross-Site Scripting Advisory Information Title: 4 TOTOLINK router models vulnerable to CSRF and XSS attacks Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x01.txt Blog URL:...

Havij - OLE Automation Array Remote Code Execution

Havij - OLE Automation Array Remote Code Execution !/usr/bin/php ?php Title : Havij OLE Automation Array Remote Code Execution Affected Versions: All Version Founder : ITSecTeam Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail ...

NPDS CMS REvolution-13 - SQL Injection

NPDS CMS REvolution-13 - SQL Injection Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12...

Pimcore CMS 2.3.03.0 - SQL Injection

Pimcore CMS 2.3.03.0 - SQL Injection Document Title: =============== Pimcore v3.0 & v2.3.0 CMS - SQL Injection Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1363 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID:...

PsychoStats 2.2.4 Beta - Cross Site Scripting

PsychoStats 2.2.4 Beta - Cross Site Scripting PsychoStats Cross Site Scripting Vendor: Jason Morriss Product: PsychoStats Version: = 2.2.4 Beta Website: http://www.psychostats.com/ BID: 12089 CVE: CVE-2004-1417 OSVDB: 12560 SECUNIA: 13619 PACKETSTORM: 35502 Description: PsychoStats is a statistic...

WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection

WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...

Cart Engine 3.0 - Multiple Vulnerabilities

Cart Engine 3.0 - Multiple Vulnerabilities === Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially...

Oracle Demantra 12.2.1 - SQL Injection

Oracle Demantra 12.2.1 - SQL Injection Details: Application is vulnerable to SQL injection. Impact: An attacker with access to the vulnerable pages could manipulate the queries being sent to the database, potentially enabling them to: - Extract sensitive information, including but not limited to...

WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation

WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation Exploit Title: Wordpress plugin Buddypress 2 Visit the url http://example.com/groups/create/step/group-details/ 3 Enjoy the power...

Zikula CMS 1.3.5 - Multiple Vulnerabilities

Zikula CMS 1.3.5 - Multiple Vulnerabilities Document Title: =============== Zikula CMS v1.3.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1114 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID:...

Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities

Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities CSRF: Loftek Nexus 543 CSRF PoC Memory Dump: !/bin/sh This script exploits CVE-2013-3311 to retrieve kernel memory from a Loftek Nexus 543 IP camera The file which is downloaded can be analyzed strings to recover passwords and other goodies i...

Sybase EAServer 6.3.1 - Multiple Vulnerabilities

Sybase EAServer 6.3.1 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sybase EAServer vulnerable version: =6.3.1 fixed version: vendor did not supply version...

DS3 Authentication Server - Multiple Vulnerabilities

DS3 Authentication Server - Multiple Vulnerabilities Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues...

KindEditor - Multiple Arbitrary File Upload Vulnerabilities

KindEditor - Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/58431/info KindEditor is prone to multiple remote file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to upload arbitrary...

D-Link DSL-2740B ADSL Router - Authentication Bypass

D-Link DSL-2740B ADSL Router - Authentication Bypass +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano...

SonicWALL OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities

SonicWALL OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities Title: ====== Sonicwall OEM Scrutinizer v9.5.2 - Multiple Web Vulnerabilities Date: ===== 2013-02-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=786 VL-ID: ===== 786 Common Vulnerability Scoring System:...

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System:...

Splunk 4.3.3 - Arbitrary File Read

Splunk 4.3.3 - Arbitrary File Read Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...

Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities

Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities Luigi Auriemma Application: Sielco Sistemi Winlog http://www.sielcosistemi.com/en/products/winlogscadahmi/ Versions: Options-TCP/IP" section of the project we want to run and Runtime.exe will listen on the TCP port...

Network Instrument Observer - SNMP SetRequest Denial of Service

Network Instrument Observer - SNMP SetRequest Denial of Service Application: Network Instrument Observer SNMP SetRequest Denial of Service Vulnerability Platforms: Windows Secunia: SA47898 PRL: 2012-05 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...

Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities

Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/51444/info Rockwell Automation FactoryTalk Activation Server is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues...

SMF 2.0.1 - SQL Injection Privilege Escalation

SMF 2.0.1 - SQL Injection Privilege Escalation !/usr/bin/python -- coding: iso-8859-15 -- Exploit Title: Smf = 2.0.1 Sql injection Vulnerability Author: The:Paradox Disclosure date: 06/12/2011 Software Link: http://download.simplemachines.org/ , http://www.php.net/releases/ Smf = 2.0.1 Sql...

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow (PoC)

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow PoC g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception ha...

ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting Multiple SQL Injections

ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting Multiple SQL Injections source: https://www.securityfocus.com/bid/48083/info ARSC Really Simple Chat is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize...

Elxis CMS 2009.2 - Remote File Inclusion

Elxis CMS 2009.2 - Remote File Inclusion \ \ \ / / / \ / / / |// / / // // / / / // // / installation folder.'; include$mosConfigabsolutepath.'/includes/systemplates/router.php'; exit; requireonce$mosConfigabsolutepath.'/includes/Core/loader.php'; file : index2.php...

gitWeb 1.7.3.3 - Cross-Site Scripting

gitWeb 1.7.3.3 - Cross-Site Scripting -8 Description 8--8 Proof Of Concept 8- " -8 Credits 8- -8 Responsible Disclosure 8- 13-12-2010 Initial contact with upstream and vendor-sec 13-12-2010 Vendor Response and CVE-2010-3906 assignation 15-12-2010 Public Disclosure...

Native Instruments (Multiple Products) - DLL Loading Arbitrary Code Execution

Native Instruments Multiple Products - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44989/info Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code. An attacker can exploit these issues by...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

Woltlab Burning Board Userlocator 2.5 - SQL Injection ----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board...

Microsoft ASP.NET - Auto-Decryptor File Download (MS10-070)

Microsoft ASP.NET - Auto-Decryptor File Download MS10-070 !/usr/bin/ruby -w aspxadchotextattack.rb Copyright c 2010 AmpliaSECURITY. All rights reserved http://www.ampliasecurity.com Agustin Azubel - [email protected] MS10-070 ASPX proof of concept Decrypt data using an auto decryptor...

Mozilla Firefox CSS - font-face Remote Code Execution

Mozilla Firefox CSS - font-face Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moabu-15-mozilla-firefox-css-font-face-remote-code-execution-vulnerability/...

4Images 1.7.8 - Remote File Inclusion

4Images 1.7.8 - Remote File Inclusion Exploit Title: 4images1.7.8 Remote File Include Date: 23-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.4homepages.de/4images/download.php Version: v 1.7.8 Tested on: Windows XP CVE : Contact: LoSt.HaCkEratyahoodotcom /0r/ ...

Joomla! Component com_zina - SQL Injection

Joomla! Component comzina - SQL Injection Exploit Title: Joomla Component comzina SQL Injection Vulnerability Date: 21-08-2010 Author: Th3 RDX Software Link:http://www.pancake.org/zina/ Version: 2.x Tested on: Demo Site category: webapp Code : n/a...

big.asp - SQL Injection

big.asp - SQL Injection Author : Ra3cH Price : N/A Title : big.asp SQL Injection Vulnerability Site : www.dz4all.com/cc Dork : inurl:enq/big.asp?id= Risk : High Vulnerable script: enq/big.asp?id= SQL-injection ---------------------------------------------------------...

G5 Scripts Guestbook PHP 1.2.8 - Cross-Site Scripting

G5 Scripts Guestbook PHP 1.2.8 - Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Guestbook PHP XSS Vulnerability Author = Valentin Hoebel Contact = [email protected]...

Apache OFBiz - Admin Creator

Apache OFBiz - Admin Creator / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes =...

blog ink - Bypass Setting

blog ink - Bypass Setting ======================================================================================== | Title : blog ink By Pass Setting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : powered by blog ink | Dork : Powered b...

Milonic News - viewnews SQL Injection

Milonic News - viewnews SQL Injection ============================================================================= +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----------------------------------------------------------------------------- + Title : Milonic News...

ImageVue 2.0 - Remote Admin Login

ImageVue 2.0 - Remote Admin Login Author: Sora Software Link: http://www.imagevuex.com/ Version: 2.0 Tested on: Windows and Linux --------------------------------- / ImageVue 2.0 Remote Admin Login Exploit Created by Sora Contact: vhr95zw at hotmail.com / + Google Dork: "inurl:/admin/" "ImageVue"...

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities

Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title...

Linux Kernel 2.6.14.6 - procfs Kernel Memory Disclosure

Linux Kernel 2.6.14.6 - procfs Kernel Memory Disclosure / cve-2005-4605.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4605 The procfs code procmisc.c in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive...

ZaoCMS - user_id SQL Injection

ZaoCMS - userid SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: ZaoCMS - SQL Injection Vulnerability =INFO: http://zaocms.com/ =BUY: http://zaocms.com/ =DORK: --...

OpenSSL 0.9.8k1.0.0-beta2 - DTLS Remote Memory Exhaustion Denial of Service

OpenSSL 0.9.8k1.0.0-beta2 - DTLS Remote Memory Exhaustion Denial of Service / cve-2009-1378.c OpenSSL http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378 In dtls1processoutofseqmessage the check if the current message is already buffered was missing...

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities ------------------------------------------------------------------------- Java SE Runtime Environment - JRE 6 Update 13 Multiple Vulnerabilities url: http://java.sun.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

eZip Wizard 3.0 - Local Stack Buffer Overflow PoC SEH /ezip wizard Local Stack Buffer Overflow SEH POC SEH chain of main thread Address SE handler 0012FC60 58585858 0012FC60 41414141 AAAA Pointer to next SEH record Old bug ,still not fixed by vendors ,this kind of file can cause problems to a lot...

DMXReady News Manager 1.1 - Arbitrary Category Change

DMXReady News Manager 1.1 - Arbitrary Category Change Title : DMXReady News Manager http://target/path//applications/NewsManager/incnewsmanager.asp Edit - http://target/path//dmin/NewsManager/CategoryManager/updatecategory.asp?cid=x Update Category Name : milw0rm.com 2009-01-13...

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo...

Joomla! Component mydyngallery 1.4.2 - SQL Injection

Joomla! Component mydyngallery 1.4.2 - SQL Injection Joomla Component mydyngallery AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

BlogMe PHP 1.1 - comments.php SQL Injection

BlogMe PHP 1.1 - comments.php SQL Injection + BlogMe PHP remote SQL injection exploit + Script download : http://www.drumster.net/gamma/downloads/BlogMe11.zip + Founded by : His0k4 ALGERIAN HaCkEr + Greetz : All friends & muslims HaCkeRs... + Dork : "BlogMe PHP created by Gamma Scripts" + Exploit...

Mambo Component Sermon 0.2 - gid SQL Injection

Mambo Component Sermon 0.2 - gid SQL Injection netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 :...

BadBlue 2.72 - PassThru Remote Buffer Overflow

BadBlue 2.72 - PassThru Remote Buffer Overflow !/usr/bin/perl -w http://aluigi.altervista.org/adv/badblue-adv.txt https://www.securityfocus.com/bid/26803 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 exploit for stack overflow in badblue 2.72 Credit to Luigi Auriemma Jacopo Cervini...