exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 26 - 50 of 286 RSS Feed

Files

Joomla Sgpprojects 3.1 SQL Injection
Posted Feb 25, 2017
Authored by Song-Dl Team

Joomla Sgpprojects component version 3.1 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 2d70c609ee6c39d7e67e653c17e9596d91ab6455beef5398f399ed21a4c6fd09
Joomla Profiler 1.4 SQL Injection
Posted Feb 25, 2017
Authored by Song-Dl Team

Joomla Profiler component version 1.4 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | b6d7a46801e81db7816458ace4dbe7d359627783d5a99c6bf578f5166307e42c
Joomla Community Surveys 4.3 SQL Injection
Posted Feb 25, 2017
Authored by Ihsan Sencan

Joomla Community Surveys component version 4.3 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 7003f566153681a8f4e8843ddcde9ff4af6dee27eb63442a31e8e96eb9c35f73
Joomla AJAX Search For K2 2.2 SQL Injection
Posted Feb 25, 2017
Authored by Ihsan Sencan

Joomla AJAX Search for K2 component version 2.2 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 0e23d1908095ad8d1554c9fe5412bc230a87bc00eef4bf3371639ae55d361652
Joomla Civicrm 1.6 SQL Injection
Posted Feb 25, 2017
Authored by Song-Dl Team

Joomla Civicrm component version 1.6 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 63c15ade491d2d63959355d82ce7f84dc1960ab516396fc7c81f426fb0f10de6
Joomla Glossary 1.6 SQL Injection
Posted Feb 25, 2017
Authored by Song-Dl Team

Joomla Glossary component version 1.6 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 30d88979ba4847864bc8a7723b8f773a6e45b441a36b98174c086e1724f2639b
Joomla GPS Tools 4.0.1 SQL Injection
Posted Feb 25, 2017
Authored by Ihsan Sencan

Joomla GPS Tools component version 4.0.1 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | e37dce21855dc4b3b644d72fe287fbe7c9c31ea7d021903cfaacd4c2390cb848
memcache-viewer Cross Site Scripting
Posted Feb 25, 2017
Authored by HaHwul

memcache-viewer suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 3a97231410e7a5dfbff21215ff23683c7d5f2e9d76d7289d1d42f989e31bd0e0
EasyCom SQL iPlug Denial Of Service
Posted Feb 24, 2017
Authored by hyp3rlinx | Site hyp3rlinx.altervista.org

EasyCom SQL iPlug suffers from a denial of service vulnerability.

tags | exploit, denial of service, sql injection
advisories | CVE-2017-5359
SHA-256 | 8ff75e06d54c1f35232927de23ac06daeac3c8d54ef6bc21733440e1e028b5d8
EasyCom AS400 PHP API Buffer Overflow
Posted Feb 24, 2017
Authored by hyp3rlinx | Site hyp3rlinx.altervista.org

The EasyCom AS400 (iBMI) PHP API suffers from a buffer overflow vulnerability.

tags | exploit, overflow, php
advisories | CVE-2017-5358
SHA-256 | 6124ed975805675e778436a46121a105d3b644ada5197bdb2d1bbaead544dc13
Air Transfer 1.2.1 / 1.0.14 Cross Site Scripting
Posted Feb 24, 2017
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Air Transfer versions 1.2.1 and 1.0.14 suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
SHA-256 | 4ff3c672752680320d8532a572df100ca60629e149d24ca58f7ba062128a5672
Travel Portal Script 9.37 Cross Site Scripting / SQL Injection
Posted Feb 24, 2017
Authored by Marc Castejon

Travel Portal Script version 9.37 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
SHA-256 | 7c0a15a3895f367ee356e75fb018aa1102c9b134758f5cd9478c60e258c9a3cd
Sonicwall SRA 8.1.0.2-14sv viewcert.cgi Remote Command Execution
Posted Feb 24, 2017
Authored by Russell Sanford | Site metasploit.com

This Metasploit module exploits a remote command execution vulnerability in the Sonicwall SRA Appliance versions 8.1.0.2-14sv and below. The vulnerability exists in a section of the machine's administrative interface for performing configurations related to on-connect scripts to be launched for users connecting.

tags | exploit, remote
SHA-256 | ee018dd39831a98879da701a3b32d457caca08abf9e8f7998865190e3fb7e893
Sonicwall SRA 8.1.0.2-14sv Remote Command Execution
Posted Feb 24, 2017
Authored by Russell Sanford | Site metasploit.com

This Metasploit module exploits a remote command execution vulnerability in the Sonicwall SRA Appliance versions 8.1.0.2-14sv and below. The vulnerability exists in a section of the machine's administrative interface for performing configurations related to on-connect scripts to be launched for users connecting.

tags | exploit, remote
advisories | CVE-2016-9683
SHA-256 | e5debce7ddf1f32b39ab4ebafe3798788f7bac257c170fec0012a53ab9729588
Cloudflare Memory Dumping Reverse Proxies
Posted Feb 24, 2017
Authored by Tavis Ormandy, Google Security Research

Cloudflare has reverse proxies that are dumping uninitialized memory.

tags | exploit
SHA-256 | 66511f241de1d3b330ddbb6ca920b62835261e611a2fa6e9a5e1f26923a423df
Apple WebKit FrameLoader::clear UXSS
Posted Feb 24, 2017
Authored by Google Security Research, lokihardt

Apple WebKit suffers from a UXSS via FrameLoader::clear.

tags | exploit
systems | apple
advisories | CVE-2017-2363
SHA-256 | 96dd616ca7980d96ce88b9b1c9eb294dcbfae7e91426263f14063998f9dbbfaf
macOS HelpViewer XSS / Arbitrary File Execution / Read
Posted Feb 24, 2017
Authored by Google Security Research, lokihardt

Cross site scripting on macOS HelpViewer leads to arbitrary file execution and arbitrary file read.

tags | exploit, arbitrary, xss
advisories | CVE-2017-2361
SHA-256 | 60ac6dfc903acc3a29b78f58ebfa4282a803cce1341a5844a4a5edfbfd88a659
Google Chrome Layout Out-Of-Bounds Read
Posted Feb 24, 2017
Authored by Ivan Fratric, Google Security Research

Google Chrome suffers from an out-of-bounds read in layout.

tags | exploit
SHA-256 | 2d3757be67305e873ee9adecfd5373daa82c75610751deda2131394581490717
Microsoft Edge / Internet Explorer HandleColumnBreakOnColumnSpanningElement Type Confusion
Posted Feb 24, 2017
Authored by Ivan Fratric, Google Security Research

Microsoft Edge and Internet Explorer suffer from a type confusion in HandleColumnBreakOnColumnSpanningElement.

tags | exploit
advisories | CVE-2017-0037
SHA-256 | acb3a39defa5f6c4a6541be344f794bfefad5affcf45b6f3a062c6bf6cbb9b2b
Android Javanano Compiler Arbitrary Class Loading / Instantiation
Posted Feb 24, 2017
Authored by Google Security Research, laginimaineb

Android suffers from an arbitrary class loading and instantiation in the protobuf parcelable "javanano" compiler.

tags | exploit, arbitrary
SHA-256 | 00694c6c42772d03fbe9189fb1b29c2886a2b4bc8a3b53aeaadae66fb7532591
WordPress Mail Masta 1.0 SQL Injection
Posted Feb 24, 2017
Authored by Hanley Shun

WordPress Mail Masta plugin version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-6095, CVE-2017-6096, CVE-2017-6097, CVE-2017-6098
SHA-256 | 7435bc6744e9bd69c9761bcb6ab621a067018103534512777e5dc3959b909a40
MBLS Flex CMS 0.7.2 SQL Injection / Cross Site Scripting
Posted Feb 24, 2017
Authored by Bilal Kardadou

MBLS Flex CMS version 0.7.2 suffers from remote SQL injection and cross site scripting vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
SHA-256 | de8bbf8970714b308b02a1c4bb5001ad45d1ad6812f661ed24075e53393fe863
Sophos Web Appliance 4.2.1.3 Remote Command Execution
Posted Feb 24, 2017
Authored by Russell Sanford | Site metasploit.com

This Metasploit module exploits a remote command execution vulnerability in the Sophos Web Appliance versions 4.2.1.3 and below. The vulnerability exists in a section of the machine's administrative interface for performing diagnostic network tests with wget and unsanitized user supplied information.

tags | exploit, remote, web
advisories | CVE-2016-9554
SHA-256 | 7db483f4c13c510be0772b6ca810c42aab21ae2d4566ceb664f88a68ec7e033c
ProjectSend r754 Insecure Direct Object Reference / Authenticaton Bypass
Posted Feb 24, 2017
Authored by Vulnerability Laboratory, Lawrence Amer | Site vulnerability-lab.com

ProjectSend r754 suffers from authentication bypass and insecure direct object reference vulnerabilities.

tags | exploit, vulnerability
SHA-256 | e576cd52b59276cce9f4867d9fc7b1432eb74feb9c066efecd24c54f3ae44bf5
Lock Photos Album And Videos Safe 4.3 Directory Traversal
Posted Feb 24, 2017
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Lock Photos Album and Videos Safe version 4.3 suffers from a directory traversal vulnerability.

tags | exploit
SHA-256 | 030e45eb2a4547c1026ac012430e5158bfa001dc92b0f82caf3acd206c8d56b3
Page 2 of 12
Back12345Next

Top Authors In Last 30 Days

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close