what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 8 of 8

Files from Filippo Roncari

SMF (Simple Machine Forum) 2.0.10 Remote Memory Exfiltration

Posted Sep 24, 2015

Authored by Filippo Roncari, Andrea Palazzo

SMF (Simple Machine Forum) versions 2.0.10 and below remote memory exfiltration exploit.

tags | exploit, remote

SHA-256 | 839a2e92d517f7cb38a35ae0c372edcf59dfd86ed247215c387c6d6b12bf6316

Download | Favorite | View

TCPDF Library 5.9 Arbitrary File Deletion

Posted May 22, 2015

Authored by Filippo Roncari

TCPDF library versions 5.9 and below suffer from an arbitrary file deletion vulnerability via object injection.

tags | exploit, arbitrary

SHA-256 | d85aaaf04782eae8912ed94a4cb59fce8b367a908734638e2ca9f22c8b5e762c

Download | Favorite | View

Forma LMS 1.3 PHP Object Injection

Posted May 18, 2015

Authored by Filippo Roncari

Forma LMS version 1.3 suffer from multiple PHP object injection vulnerabilities.

tags | exploit, php, vulnerability

SHA-256 | 044bd18c774d1e1b75ddccdda5b4e979fd43e42126b0cd1f29509d053af5c02c

Download | Favorite | View

IBM Eclipse Help System (IEHS) Cross Site Scripting

Posted May 10, 2015

Authored by Filippo Roncari

IBM Eclipse Help System (IEHS) versions 6.1.0 through 6.1.0.6, 6.1.5 through 6.1.5.3, 7.0 through 7.0.0.2, and 8.0 prior to 8.0.0.1 suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2014-0917

SHA-256 | 78429b0c7f1374231ec810487121a030b699d33bf21e504a6bd2e042e4b9511f

Download | Favorite | View

eFront 3.6.15 SQL Injection

Posted May 9, 2015

Authored by Filippo Roncari

eFront version 3.6.15 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 051268353fe674d10c4f2e312eedd4f5bb86517971365efe89200d54a086fa73

Download | Favorite | View

eFront 3.6.15 Path Traversal

Posted May 9, 2015

Authored by Filippo Roncari

eFront version 3.6.15 suffers from a path traversal vulnerability.

tags | exploit, file inclusion

SHA-256 | a476ea58150c85448541cd9202fd3d711f5606a92b2cf89b5303ddb568cf40ad

Download | Favorite | View

eFront 3.6.15 PHP Object Injection

Posted May 9, 2015

Authored by Filippo Roncari

eFront version 3.6.15 suffers from a PHP object injection vulnerability.

tags | exploit, php

SHA-256 | f2fe5a077612b62f273147939c32734270d5d4527bb7af6ab1d5161076a822e8

Download | Favorite | View

IBM WebSphere Portal 7.0 / 6.1.5 / 6.1.0 Cross Site Scripting

Posted May 7, 2015

Authored by Filippo Roncari

IBM WebSphere Portal versions 7.0, 6.1.5, and 6.1.0 suffer from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2014-0910

SHA-256 | c25c7d382ffcb40fc33d6e489077245c3549a3c7e04bdeda6e122b3e02b6e336

Download | Favorite | View