what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 8 of 8

Files from Mufaddal Masalawala

ChurchCRM 4.2.1 Cross Site Scripting

Posted Dec 2, 2020

Authored by Mufaddal Masalawala

ChurchCRM version 4.2.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 89eb66ca076542eadc0c75e2edf4b228b61b94104a54f8955a66afb56277f57d

Download | Favorite | View

ChurchCRM 4.2.0 CSV Injection

Posted Dec 2, 2020

Authored by Mufaddal Masalawala

ChurchCRM version 4.2.0 suffers from a CSV formula injection vulnerability.

tags | exploit

SHA-256 | f67f1dd8bf64323fcf6487439b5c3c64bfe3deb0e615cbd5f582f7d378c8e79a

Download | Favorite | View

Kaa IoT Platform 1.2.0 Cross Site Scripting

Posted Nov 16, 2020

Authored by Mufaddal Masalawala

Kaa IoT Platform version 1.2.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2020-26701

SHA-256 | baabed0268ed003076986e3c52fa3b1f3fc51922c6e853897cbc95dde091bc5a

Download | Favorite | View

Taskcafe 0.1.0 / 0.1.1 Cross Origin Resource Sharing

Posted Nov 16, 2020

Authored by Mufaddal Masalawala

Taskcafe version 0.1.0 and 0.1.1 suffer from a cross-origin resource sharing vulnerability.

tags | exploit

SHA-256 | e87e6d029332366150987a9e5e8ddf9a85db6b302526c9d23cfd3f9d1e9d031d

Download | Favorite | View

Anuko Time Tracker 1.19.23.5311 Missing Rate Limiting

Posted Nov 13, 2020

Authored by Mufaddal Masalawala

Anuko Time Tracker version 1.19.23.5311 suffers from an implementation flaw where password reset emails can be continuously triggered against unsuspecting users.

tags | exploit

advisories | CVE-2020-27423

SHA-256 | 53a06dece5305c8f45af55dd108f90c79e6cdcff7555fcad73ca428828be3450

Download | Favorite | View

Anuko Time Tracker 1.19.23.5311 Password Reset

Posted Nov 13, 2020

Authored by Mufaddal Masalawala

Anuko Time Tracker version 1.19.23.5311 suffers from an implementation flaw where the password reset link can be replayed.

tags | exploit

advisories | CVE-2020-27422

SHA-256 | 4814d2e98509d3300a5052ea61c3a644befcfbce98883d446a80778f9f94b4c8

Download | Favorite | View

Anuko Time Tracker 1.19.23.5325 CSV Injection

Posted Nov 10, 2020

Authored by Mufaddal Masalawala

Anuko Time Tracker version 1.19.23.5325 suffers from a CSV formula injection vulnerability.

tags | exploit

advisories | CVE-2020-15255

SHA-256 | 105e68c3d2a19035a692811e21172ba5e0ebdeec62831e1ee2d05accada9ad58

Download | Favorite | View

Grocy 2.7.1 Cross Site Scripting

Posted Sep 7, 2020

Authored by Mufaddal Masalawala

Grocy version 2.7.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 494038f46cda16cb6b551f44883e02a48297f05f73ff92a9b15c0660b8b4c326

Download | Favorite | View