what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 17 of 17

Files from hyd3sec

House Rental 1.0 SQL Injection

Posted Nov 25, 2020

Authored by Bobby Cooke, hyd3sec

House Rental version 1.0 remote SQL injection exploit that leverages the keywords variable.

tags | exploit, remote, sql injection

SHA-256 | f3ce405357239bc159864db3af6456bd0791342c989bbfdf3d252560b427b3d3

Download | Favorite | View

Tailor MS 1.0 Cross Site Scripting

Posted Sep 15, 2020

Authored by Bobby Cooke, hyd3sec

Tailor MS version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | e5d3f596826a09594cd3da84dcda261dea5ea9721eb1dcd54f95e306795f8d75

Download | Favorite | View

GetSimple CMS Multi User 1.8.2 Cross Site Request Forgery

Posted Aug 13, 2020

Authored by Bobby Cooke, hyd3sec

GetSimple CMS Multi User plugin version 1.8.2 suffers from multiple cross site request forgery vulnerabilities.

tags | exploit, vulnerability, csrf

SHA-256 | 075778612c10f536d4c7290644af4418086d7b993e4b199b7293a0ab52418e5e

Download | Favorite | View

Travel Management System 1.0 Remote Code Execution

Posted Aug 11, 2020

Authored by Bobby Cooke, hyd3sec

Travel Management System version 1.0 unauthenticated remote code execution exploit.

tags | exploit, remote, code execution

SHA-256 | ae792bbf40d2a842ca65d8accf25592c3e2dabed687c3b2b2ed5ea3351984110

Download | Favorite | View

Travel Management System 1.0 SQL Injection

Posted Aug 11, 2020

Authored by Bobby Cooke, hyd3sec

Travel Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | 760a289450add3ed69ac34686c2ac0875e492c2eaedd8b52cd0215906b35ebdc

Download | Favorite | View

Warehouse Inventory System 1.0 Cross Site Request Forgery

Posted Aug 10, 2020

Authored by Bobby Cooke, hyd3sec

Warehouse Inventory System version 1.0 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 9259a5dd56037ce00a387f69f7055e6c55dbde1233f6394e2f390ff750bc8b9b

Download | Favorite | View

Tailor MS 1.0 Cross Site Scripting

Posted Aug 10, 2020

Authored by Bobby Cooke, hyd3sec

Tailor MS version 1.0 reflected cross site scripting key logger exploit.

tags | exploit, xss

SHA-256 | 24220cad535f63bbf6ab9fb8609e3780a5eb9b381a139bf42293242409ed5b05

Download | Favorite | View

BarracudaDrive 6.5 Local Privilege Escalation

Posted Aug 10, 2020

Authored by Bobby Cooke, hyd3sec

BarracudaDrive version 6.5 suffers from a privilege escalation vulnerability.

tags | exploit

SHA-256 | bd93725c180cdafc139079c727d570922f7d871548126bc0ba7bf1843d4f7cb3

Download | Favorite | View

House Rental 1.0 SQL Injection

Posted Aug 10, 2020

Authored by Bobby Cooke, hyd3sec

House Rental version 1.0 SQL injection exploit that changes the administrative password. Written in python.

tags | exploit, sql injection, python

SHA-256 | 03add875cfdb342001765974b146763270038bf46f6fe406f0e48df2834e06a7

Download | Favorite | View

Car Rental Management System 1.0 Remote Code Execution

Posted Aug 4, 2020

Authored by hyd3sec

Car Rental Management System version 1.0 unauthenticated remote code execution exploit.

tags | exploit, remote, code execution

SHA-256 | ded9539f93f93225baca3f19309a19831bccb44a855907289ad395322a75422e

Download | Favorite | View

Car Rental Management System 1.0 Cross Site Scripting

Posted Aug 4, 2020

Authored by hyd3sec

Car Rental Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 6527e433c91a38dda3f42d94a7b2be8037e10eda89003ebc226ebb4f46464ecc

Download | Favorite | View

Stock Management System 1.0 Cross Site Scripting

Posted Aug 3, 2020

Authored by hyd3sec

Stock Management System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities in the Brand, Categories, and Product name fields.

tags | exploit, vulnerability, xss

SHA-256 | 44d1c4e7dd16bebd23daa0467251ad156190d552ba57b316c08e62b53366bd14

Download | Favorite | View

Stock Management System 1.0 SQL Injection

Posted Aug 3, 2020

Authored by hyd3sec

Stock Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | dcfd2ffa5ed5b4f42910bec98ff5804e14016f9e1326b2b68b2bbd027fa8b38f

Download | Favorite | View

Online Bike Rental 1.0 Shell Upload

Posted Aug 1, 2020

Authored by Bobby Cooke, hyd3sec

Online Bike Rental version 1.0 suffers from an authenticated remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 3df5a1467fc3909370ba828c15f93e72b4265fd87271aa821233dcccaae9f382

Download | Favorite | View

Online Bike Rental 1.0 Shell Upload

Posted Jul 31, 2020

Authored by hyd3sec

Online Bike Rental version 1.0 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 9d65a298b050a5b43708ca479a4d023a523e9e32c643aa86a173c413bd9ae026

Download | Favorite | View

Daily Tracker System 1.0 Cross Site Scripting

Posted Jul 31, 2020

Authored by hyd3sec

Daily Tracker System version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 37211990b92e06b8e30d593c2ad3ba20a97371dcc1889e35595564725e17ecfe

Download | Favorite | View

Daily Tracker System 1.0 SQL Injection

Posted Jul 31, 2020

Authored by Bobby Cooke, hyd3sec

Daily Tracker System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

advisories | CVE-2020-24193

SHA-256 | a8be4ff2a62d77c301deb8c022913ab021be0ba97c5458a6e843f74c9b13d029

Download | Favorite | View