what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files from Hans-Martin Muench

PowerFolder 10.4.321 Remote Code Execution

Posted May 24, 2016

Authored by Hans-Martin Muench

PowerFolder version 10.4.321 suffers from a remote code execution vulnerability. Proof of concept exploit included.

tags | exploit, remote, code execution, proof of concept

systems | linux

SHA-256 | 0f0efada160c1447152adc09401bed6a535c764c9ce9e56f17fa7b105821aa98

Download | Favorite | View

iPass Mobile Client 2.4.2.15122 Privilege Escalation

Posted Mar 13, 2015

Authored by Hans-Martin Muench

iPass Mobile Client version 2.4.2.15122 suffers from a local privilege escalation vulnerability.

tags | exploit, local

SHA-256 | bd007d26621d154125e049c9012e6a55d1250112d7f68cf635a95297806bc04a

Download | Favorite | View

Hewlett-Packard UCMDB 10.10 JMX-Console Authentication Bypass

Posted Feb 3, 2015

Authored by Hans-Martin Muench

Hewlett-Packard Universal CMDB version 10.10 suffers from a jmx-console related authentication bypass vulnerability.

tags | exploit, bypass

advisories | CVE-2014-7883

SHA-256 | 1f3e56ca24c0afc54d16226ea210b990c83d4e7649564d542361c4adc7866481

Download | Favorite | View

WordPress Pixarbay Images 2.3 XSS / Bypass / Upload / Traversal

Posted Jan 19, 2015

Authored by Hans-Martin Muench

WordPress Pixarbay Images plugin version 2.3 suffers from authentication bypass, cross site scripting, remote shell upload, and path traversal vulnerabilities.

tags | exploit, remote, shell, vulnerability, xss

SHA-256 | e8fdd468e6a1e0c52e7b2d7f13d998fd901f754bba86a40ce752dd2fadcf3302

Download | Favorite | View

Typo3 JobControl 2.14.0 Cross Site Scripting / SQL Injection

Posted Sep 26, 2014

Authored by Hans-Martin Muench

Typo3 JobControl version 2.14.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Typo3 no longer provides updates for this extension and it is considered unsafe to use.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | fd26ba8328d734e82a7dea5f7dff200a5a1a0a8862c060bfd070948aa195c3db

Download | Favorite | View

ManageEngine EventLog Analyzer 9.9 Authorization / Code Execution

Posted Sep 1, 2014

Authored by Hans-Martin Muench

ManageEngine EventLog Analyzer version 9.9 suffers from unauthenticated remote code execution via shell upload and authorization vulnerabilities.

tags | exploit, remote, shell, vulnerability, code execution

advisories | CVE-2014-6037

SHA-256 | a0c98cac5f5fd141c8b87fb1b8f63391779ddd21923531556150cd799b862ef7

Download | Favorite | View