| Real Name | Bobby Cooke |
|---|---|
| Email address | private |
| First Active | 2019-12-13 |
| Last Active | 2021-09-17 |
Library Management System version 1.0 suffers from a remote blind time-based SQL injection vulnerability.
d1b3bec04564901a9e4024f4c99cae47The Custom JS plugin version 0.1 for GetSimple CMS suffers from a cross site request forgery vulnerability that allows remote unauthenticated attackers to inject arbitrary client-side code into authenticated administrators browsers, which results in remote code execution on the hosting server, when an authenticated administrator visits a malicious third party website.
f84e4d61a61db6947381a07172b5af44655 bytes small 64-bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
75a126bd35170b68365261ae4f904c66205 bytes small 64-bit Windows 10 shellcode that dynamically resolves the base address of kernel32.dll via PEB and ExportTable method. It contains no null bytes (0x00), and therefore will not crash if injected into typical stack buffer overflow vulnerabilities.
02563e617ae846cbf28e476c3c33e2a9387 bytes small 64-bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups. Shellcode must be executed from a process with either a HIGH or SYSTEM integrity level.
6df3a5415bbadd51489ca198606490f1GetSimple CMS My SMTP Contact plugin versions 1.1.1 and below cross site request forgery to persistent cross site scripting to remote code execution exploit.
931e4a8e898c36150bfb22c1e2de3963GetSimple CMS My SMTP Contact plugin versions 1.1.1 and below cross site request forgery to remote code execution exploit.
7d48adbe7385fbb2fa16170c86231d41GetSimple CMS version 3.3.16 cross site scripting to remote shell upload exploit.
3c1d773d613339fb004324bead97e042House Rental version 1.0 remote SQL injection exploit that leverages the keywords variable.
c74de0bcdcb478a0ebbca36dac706cc0CloudMe version 1.11.2 exploit that uses MSVCRT.System to create a new user (boku:0v3R9000!) and add the new user to the Administrators group. A requirement of successful exploitation is the CloudMe.exe process must be running as administrator.
ee00ae19cbee8ea397dcd21d71b0c0f1Tailor MS version 1.0 suffers from a cross site scripting vulnerability.
8b140ec9d3e79e50039c0fd163119144GetSimple CMS Multi User plugin version 1.8.2 suffers from multiple cross site request forgery vulnerabilities.
b7868197fa770b7cffbd822964b7f528Travel Management System version 1.0 unauthenticated remote code execution exploit.
481e294a5c3b19ae9308d1e27f22aeceTravel Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
c518e2efaa06ce2e1007f8bacde5aec9Warehouse Inventory System version 1.0 suffers from a cross site request forgery vulnerability.
01290f1430fc0c874d2441c5bbeb39f0Tailor MS version 1.0 reflected cross site scripting key logger exploit.
e7c6a76445ffac2108a614abbaec5d98BarracudaDrive version 6.5 suffers from a privilege escalation vulnerability.
46d297f212c73f78372745c92dba3e78House Rental version 1.0 SQL injection exploit that changes the administrative password. Written in python.
4835e335cf4e574990008b7767ccd72aCar Rental Management System version 1.0 unauthenticated persistent cross site scripting session harvester exploit.
af3f86a5e983da7361832c54ce227ebdStock Management System version 1.0 suffers from a cross site request forgery vulnerability.
3c5b73ade86e8add863d011533c5b13bStock Management System version 1.0 cross site scripting credential harvesting exploit.
e446b8905eecb3fea89495e9af42d485Online Bike Rental version 1.0 suffers from an authenticated remote shell upload vulnerability.
c24d92ba32b907f53df823c312feb8d2Daily Tracker System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
4f5a24a83647c98bdc4387fb5214ec35LibreHealth version 2.0.0 authenticated remote code execution exploit.
c21b4b511f291e76d1d84cb98e90cd06LibreHealth version 2.0.0 authentication remote code execution exploit that leverages file upload.
fdb429c0607ceadf1536570f0e8ac8d9
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed