what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from DAU Huy Ngoc

Simple Online Planning Tool 1.3.2 XSS / SQL Injection / Traversal

Posted Jul 11, 2015

Authored by DAU Huy Ngoc

Simple Online Planning Tool version 1.32 suffers from code execution, cross site scripting, remote SQL injection, information disclosure, and path traversal vulnerabilities.

tags | exploit, remote, vulnerability, code execution, xss, sql injection, file inclusion, info disclosure

advisories | CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677

SHA-256 | 32dae8e31efafb0f8de6905c81b8d83bdf394bd0a72d081684525e19633c3dfa

Download | Favorite | View

Merethis Centreon 2.5.4 SQL Injection / Remote Command Execution

Posted Jul 8, 2015

Authored by DAU Huy Ngoc

Merethis Centreon versions 2.5.4 and below suffer from remote SQL injection and command execution vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

advisories | CVE-2015-1560, CVE-2015-1561

SHA-256 | 33a4b6850bc8efa423b2d9f3dee79ec98c4aad0c75b497867a6a543467abc2bd

Download | Favorite | View

FreeBox 3.0.2 Cross Site Request Forgery / Cross Site Scripting

Posted Jun 2, 2015

Authored by DAU Huy Ngoc

FreeBox OS web interface version 3.0.2 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, web, vulnerability, xss, csrf

advisories | CVE-2014-9382, CVE-2014-9405

SHA-256 | 8b354a16cf31983ad2030f2006fe3bb3ff7e12182d4bfdf60b2ae29f978dc1e2

Download | Favorite | View