exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Nadeem Salim

ServiceNow Insecure Access Control / Full Admin Compromise

Posted Jul 10, 2023

Authored by Nadeem Salim, Eldar Marcussen, Luke Symons, Jeff Thomas, Stephen Bradshaw, Tony Wu, Gareth Phillips | Site x64.sh

ServiceNow suffered from having an insecure access control that could lead to full administrative compromise. The associated link has a proof of concept.

tags | advisory, proof of concept

advisories | CVE-2022-43684

SHA-256 | 1ba72d97e5b5609910fcc6b7107bef5cb14d772f105f4a4b5e856f37da0c93f2

Download | Favorite | View

PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass

Posted May 30, 2023

Authored by Nadeem Salim, Eldar Marcussen, Luke Symons, Jeff Thomas, Stephen Bradshaw, Yianna Paris, Tony Wu, Gareth Phillips

PrinterLogic build version 1.0.757 suffers from authentication bypass, cross site request forgery, cross site scripting, session fixation, insufficient checks, impersonation, remote SQL injection, and various other vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, bypass, csrf

SHA-256 | 1631d9ea880d645fa96e60ab35dadd9fa31ea602fc8d3ea5528a7418cc9cfc0b

Download | Favorite | View

Squiz CMS 4.6.3 XXE Injection / Cross Site Scripting

Posted Jun 18, 2012

Authored by Nadeem Salim | Site senseofsecurity.com.au

Squiz CMS version 4.6.3 suffers from cross site scripting and XXE injection vulnerabilities.

tags | exploit, vulnerability, xss, xxe

SHA-256 | a5d045b3aad07ff6c6442d788cf3530feb8b0422a99a5af1dae6dda396024529

Download | Favorite | View

QNAP Command Injection

Posted Jun 17, 2012

Authored by Phil Taylor, Nadeem Salim | Site senseofsecurity.com.au

QNAP Turbo NAS with firmware versions 3.6.1 Build 0302T and below suffer from a command injection vulnerability that allows for remote code execution.

tags | exploit, remote, code execution

SHA-256 | bcec74851c024f2e1466935f495fd1687810e39d50b44f12aa001bc14964e143

Download | Favorite | View