MyBB 1.8.3 (with PHP 5.6 5.6.11) - Remote Code Execution

MyBB 1.8.3 with PHP 5.6 5.6.11 - Remote Code Execution GMP Deserialization Type Confusion Vulnerability MyBB - Write Date: 2015.4.28 - Release Date: 2017.1.20 A type-confusion vulnerability was discovered in GMP deserialization with crafted object's wakeup magic method that can be abused for...

ICTutors Tutoring Site Script 1.1 - Authentication Bypass

ICTutors Tutoring Site Script 1.1 - Authentication Bypass Exploit Title: ICTutors-Tutoring Site Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/tutoring-site-script.htm Demo:...

B2B Alibaba Clone Script - IndustryID SQL Injection

B2B Alibaba Clone Script - IndustryID SQL Injection Exploit Title: B2B Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 20.01.2017 Vendor Homepage: https://www.clonescriptsoft.com/ Software Buy: https://www.clonescriptsoft.com/collections/b2b-alibaba-clone/products/alibaba-clone Demo:...

Joomla! 2.5.2 - Admin Creation

Joomla! 2.5.2 - Admin Creation !/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf Source: https://www.ambionics.io/blog/cve-2016-9838-joomla-account-takeover-and-remote-code-execution import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url...

Music Site Script 1.2 - Authentication Bypass

Music Site Script 1.2 - Authentication Bypass Exploit Title: ICMusic - Music Site Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/music-site-script.htm Demo:...

ICGames-Games Site Script 1.2 - Authentication Bypass

ICGames-Games Site Script 1.2 - Authentication Bypass Exploit Title: ICGames-Games Site Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/games-site-script.htm Demo:...

Joomla! 3.6.4 - Admin Takeover

Joomla! 3.6.4 - Admin Takeover !/usr/bin/python3 CVE-2016-9838: Joomla! = 3.6.4 Admin TakeOver cf Source: https://www.ambionics.io/blog/cve-2016-9838-joomla-account-takeover-and-remote-code-execution import bs4 import requests import random ADMINID = 384 url = 'http://vmweb.lan/Joomla-3.6.4/'...

Mini Blog 1.1 - Authentication Bypass

Mini Blog 1.1 - Authentication Bypass Exploit Title: IC-Mini Blog Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/miniblog.htm Demo: http://www.icloudcenter.net/demos/miniblog/ Version: 1.1...

Mini CMS 1.1 - Authentication Bypass

Mini CMS 1.1 - Authentication Bypass Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested...

Job Site PHP Script 1.1 - Authentication Bypass

Job Site PHP Script 1.1 - Authentication Bypass Exploit Title: ICJobSite-Job Site PHP Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/jobs-site-script.htm Demo:...

Affiliate Tracking Script 1.1 - Authentication Bypass

Affiliate Tracking Script 1.1 - Authentication Bypass Exploit Title: ICAffiliateTracking - Affiliate Tracking Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/affiliates-tracking-script.htm Dem...

SDR-RepeatRF

This is a module that could be used to repeat previously saved RF data for debugging purposes. In order to save or repeat RF signals an SDR is needed. !/usr/bin/env python2 -- coding: utf-8 -- GNU Radio Python Flow Graph Title: Exploit Pack - RF Hacking Author: Juan Sacco Description: RF Repeater...

SDR-SaveRF

This is a module that could be used to save RF signals for debugging purpouses or to be replayed using a repeater, by default the destination is /tmp/saveRF !/usr/bin/env python2 -- coding: utf-8 -- GNU Radio Python Flow Graph Title: Exploit Pack - RF Hacking Author: Juan Sacco Description: RF Sa...

Job Vacancy Script - SQL Injection

Job Vacancy Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Ma...

Home of Viral Images_ Videos and Articles Script - SQL Injection

Home of Viral Images Videos and Articles Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Home of Viral Images, Videos and Articles Script Script Buy Now:...

Image and Video Script - SQL Injection

Image and Video Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Image and Video Script Script Buy Now: http://www.scriptfolder.com/funzone-image-and-video-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Vine VideoSite Creator Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihsan Senca...

Video Site Creator Script - SQL Injection

Video Site Creator Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: VideoZone - Video Site Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-videozone-video-site-creator/ Author: Ihsan Sencan Auth...

Social News and Bookmarking Script - SQL Injection

Social News and Bookmarking Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Social News and Bookmarking Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-bookmark-drive-social-news-and-bookmarking-script...

Google Android TSP sysfs - cmd_store Multiple Overflows

Google Android TSP sysfs - cmdstore Multiple Overflows Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=967 The TSP touchscreen controller driver exposes several sysfs entries through which the driver may be configured. One such entry, "cmd", allows the user to write commands to ...

Viral Image Sharing Script - SQL Injection

Viral Image Sharing Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Viral Image Sharing Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-imagegags-viral-image-sharing-script/ Author: Ihsan Sencan Author...

Pirelli DRG A115 v3 ADSL Router - DNS Change

Pirelli DRG A115 v3 ADSL Router - DNS Change !/bin/bash Pirelli DRG A115 v3 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which...

Viral Image Video Sharing GagZone Script - SQL Injection

Viral Image Video Sharing GagZone Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Viral Image & Video Sharing GagZone Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-gagzone/ Author: Ihsan Sencan Autho...

Classifieds Script - term SQL Injection

Classifieds Script - term SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Classifieds Script Script Buy Now:http://www.scriptfolder.com/scriptfolder-classifieds/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Tenda ADSL22+ Modem D820R - DNS Change

Tenda ADSL22+ Modem D820R - DNS Change !/bin/bash Tenda ADSL2/2+ Modem D820R Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is...

My Private Tutor Website Builder Script - SQL Injection

My Private Tutor Website Builder Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now:...

NGO Directory Script - SQL Injection

NGO Directory Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: NGO Directory Script Script Buy Now: http://www.popularclones.com/products/NGO-Directory-Script Author: Ihsan Sencan Author Web:...

Buy and Sell Market Place Software - SQL Injection

Buy and Sell Market Place Software - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Buy and Sell Market Place Software Script Buy Now:...

NGO Website Script - SQL Injection

NGO Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: NGO Website Script Script Buy Now: http://www.popularclones.com/products/NGO-Website-Script Author: Ihsan Sencan Author Web:...

Finance Website Script - SQL Injection

Finance Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

SentryHD 02.01.12e - Local Privilege Escalation

SentryHD 02.01.12e - Local Privilege Escalation ''' Exploit Title: SentryHD 02.01.12e Privilege Escalation Date: 18-01-2017 Software Link: http://www.minutemanups.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: local 1...

Business Directory Script - SQL Injection

Business Directory Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Business Directory Script Script Buy Now: http://www.popularclones.com/products/Business-Directory-Script Author: Ihsan Sencan...

Online Mobile Recharge Script - SQL Injection

Online Mobile Recharge Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Mobile Recharge Script Buy Now: http://www.popularclones.com/products/Online-Mobile-Recharge Author: Ihsan Sencan...

Medical Clinic Website Script - SQL Injection

Medical Clinic Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Medical Clinic Website Script Script Buy Now: http://www.popularclones.com/products/Medical-Clinic-Website Author: Ihsan...

Online Tshirt Design Script - SQL Injection

Online Tshirt Design Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Tshirt Design Script Script Buy Now: http://www.popularclones.com/products/Online-Tshirt-Designer Author: Ihsan Sencan...

Yoga and Fitness Website Script - SQL Injection

Yoga and Fitness Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Yoga and Fitness Website Script Script Buy Now: http://www.popularclones.com/products/Yoga-and-Fitness-Website Author: Ihsan Sencan Author Web:...

Dentist Website Script - SQL Injection

Dentist Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Dentist Website Script Script Buy Now: http://www.popularclones.com/products/Dentist-Website-Script Author: Ihsan Sencan Author We...

Manufacturer Website Design Script - SQL Injection

Manufacturer Website Design Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Manufacturer Website Design Script Script Buy Now: http://www.popularclones.com/products/Manufacturer-Website Author:...

Questions and Answers Script 1.1.3 - id SQL Injection

Questions and Answers Script 1.1.3 - id SQL Injection Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Fileserve Clone Script - Authentication Bypass

Fileserve Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan Author...

Online Printing Business Clone Script - SQL Injection

Online Printing Business Clone Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Printing Business Clone Script Script Buy Now: http://www.popularclones.com/products/Online-Print-Business...

Shiksha Educational Website Script - SQL Injection

Shiksha Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Shiksha Educational Website Script Script Buy Now: http://www.popularclones.com/products/Shiksha-Educational Author:...

Clone of Oddee Script 1.1.3 - SQL Injection

Clone of Oddee Script 1.1.3 - SQL Injection Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web:...

Wetransfer Clone Script - Authentication Bypass

Wetransfer Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Wetransfer Clone Script Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script Author: Ihsan Sencan...

Auction Website Script - SQL Injection

Auction Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Auction Website Script Script Buy Now: http://www.popularclones.com/products/Auction-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Micro Blog Script - SQL Injection

Micro Blog Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Tested on: http://www.microblogscript.scriptgiant.in Script Name: Micro Blog Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Study Abroad Educational Website Script - SQL Injection

Study Abroad Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...

Flippa Website Script - SQL Injection

Flippa Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Flippa Website Script Script Buy Now: http://www.popularclones.com/products/Flippa-Website Author: Ihsan Sencan Author Web:...

B2B Script 4.27 - SQL Injection

B2B Script 4.27 - SQL Injection Vulnerability: B2B Script v4.27 - SQL Injection Date: 18.01.2017 Software link: http://itechscripts.com/b2b-script/ Demo: http://b2b.itechscripts.com Price: 199$ Category: webapps Exploit Author: Dawid Morawski Website: http://www.morawskiweb.pl Contact:...

Justdial Clone Script - Authentication Bypass

Justdial Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Justdial Clone Script Script Buy Now: http://www.popularclones.com/products/Justdial-Directory Author: Ihsan Sencan Author...