Showing 1 - 7 of 7

Files from P. Morimoto

First Active	2015-10-23
Last Active	2018-07-12

Zeta Producer Desktop CMS 14.2.0 Code Execution / File Disclosure: Posted Jul 12, 2018; Authored by P. Morimoto | Site sec-consult.com; Zeta Producer Desktop CMS versions 14.2.0 and below suffers from code execution and file disclosure vulnerabilities.; tags | exploit, vulnerability, code execution; advisories | CVE-2018-13980, CVE-2018-13981; SHA-256 | 7b34d3b01869b6871b496570304d7e9c09086b2b712d8580375a7a234aaf2478; Download | Favorite | View

Cisco Prime Infrastructure 3.1.6 XXE Injection / XSS / LFD / SQL Injection: Posted Jun 22, 2017; Authored by P. Morimoto | Site sec-consult.com; Cisco Prime Infrastructure versions 1.1 through 3.1.6 suffer from cross site scripting, XML external entity injection, file disclosure, and remote SQL injection vulnerabilities.; tags | exploit, remote, vulnerability, xss, sql injection, xxe; systems | cisco; advisories | CVE-2017-6662, CVE-2017-6698, CVE-2017-6699, CVE-2017-6700; SHA-256 | b99dc34bb1d4f4d0e0a2ab8dce19e42ad7671744eb78f870180c5ae19b9036d4; Download | Favorite | View

Aruba AirWave 8.2.3 XXE Injection / Cross Site Scripting: Posted Mar 1, 2017; Authored by P. Morimoto | Site sec-consult.com; Aruba AirWave versions 8.2.3 and below suffer from XXE injection and cross site scripting vulnerabilities.; tags | exploit, vulnerability, xss, xxe; advisories | CVE-2016-8526, CVE-2016-8527; SHA-256 | 26d6fd5588cb2706ccd2898c50798a639ccb5ed66cc64b8e72e5688fa5250278; Download | Favorite | View

LINE Instant Messenger Pre-June 2016 SSRF / Authorization Bypass: Posted Aug 10, 2016; Authored by P. Morimoto | Site sec-consult.com; LINE Instant Messenger versions before June 2016 suffer from authorization bypass and server-side request forgery vulnerabilities.; tags | advisory, vulnerability; SHA-256 | 8b06a080228cc5d67268fee0ebddc5be63e937694570091aeb595350317d2067; Download | Favorite | View

ASUS DSL-N55U 3.0.0.4.376_2736 XSS / Information Disclosure: Posted Jun 25, 2016; Authored by P. Morimoto | Site sec-consult.com; ASUS DSL-N55U version 3.0.0.4.376_2736 suffers from cross site scripting and information disclosure vulnerabilities.; tags | exploit, vulnerability, xss, info disclosure; SHA-256 | 2297595e06db7fa420a012baf7d29c1bd77b0683ceb2f735ed013c7ffe5a94be; Download | Favorite | View

Yeager CMS 1.2.1 File Upload / SQL Injection / XSS / SSRF: Posted Feb 11, 2016; Authored by P. Morimoto | Site sec-consult.com; Yeager CMS version 1.2.1 suffers from cross site scripting, remote file upload, server-side request forgery, and remote SQL injection vulnerabilities.; tags | exploit, remote, vulnerability, xss, sql injection, file upload; advisories | CVE-2015-7567, CVE-2015-7568, CVE-2015-7569, CVE-2015-7570, CVE-2015-7571, CVE-2015-7572; SHA-256 | 03e6c9d482ae673cb0b908755a1f9f71b4985c832a6f00acd3a78b5606fbb2e1; Download | Favorite | View

Lime Survey 2.06+ Build 151014 File Download / Code Execution: Posted Oct 23, 2015; Authored by P. Morimoto | Site sec-consult.com; Lime Survey versions 2.05 through 2.06+ Build 151014 suffer from arbitrary file download, database access, and php code execution vulnerabilities.; tags | advisory, arbitrary, php, vulnerability, code execution; SHA-256 | e64f7d819aa7dc537c606c5a35ab89341148e290c54c9d62321a5507095816c5; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days