what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 201 - 225 of 237

Files from nu11secur1ty

Online Learning System 2 SQL Injection

Posted Sep 6, 2021

Authored by nu11secur1ty

Online Learning System version 2 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | 30ecf4a53c3728d70068c785825932024f9cff4f32e676eb74ecf0ea12830978

Download | Favorite | View

COVID-19 Contact Tracing System With QR Code Scanning 1.0 SQL Injection

Posted Sep 1, 2021

Authored by nu11secur1ty

COVID-19 Contact Tracing System web app with QR Code Scanning version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, web, sql injection

SHA-256 | 65bfd748e4acc27cb5df73d53350628dfaef17ece6a6fe72d8b2737edaee7016

Download | Favorite | View

Online Leave Management System 1.0 SQL Injection

Posted Aug 31, 2021

Authored by nu11secur1ty

Online Leave Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | e78dd8b5ffb66e7907834608fdf4bbd7e16eb43fcbe3166f269c91a8918cec7c

Download | Favorite | View

Ship Ferry Ticket Reservation System 1.0 SQL Injection

Posted Aug 30, 2021

Authored by nu11secur1ty

Ship Ferry Ticket Reservation System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | 803a0c96cba11ecfa8b1ec9bfa813ccb70c19b42780ebdf3ff7fe5814519b7cc

Download | Favorite | View

Hospital Management System Cross Site Scripting

Posted Aug 18, 2021

Authored by nu11secur1ty

Hospital Management System created by kishan0725 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-38757

SHA-256 | fba4631f14e90d73450defe4cb343ab885a20f7605579117cd8b3616832a11e4

Download | Favorite | View

TastyIgniter 3.0.7 Cross Site Scripting

Posted Aug 16, 2021

Authored by nu11secur1ty

TastyIgniter version 3.0.7 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-38699

SHA-256 | 8bc282866dfa7c402710f8b78eda642351f7bffc746f076008510fccb63455fb

Download | Favorite | View

PluXML 5.8.7 Cross Site Scripting

Posted Aug 13, 2021

Authored by nu11secur1ty

PluXML version 5.8.7 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-38603

SHA-256 | 54990585b9bccec56f64c839b836fe6765dc931c23ca4c89ce1a18c08f9938cc

Download | Favorite | View

Chikitsa 2.0.0 Cross Site Scripting

Posted Aug 13, 2021

Authored by nu11secur1ty

Chikitsa version 2.0.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-38152

SHA-256 | 7866bd2e010152cadeea985b8259a7f9ff28f429ebbf5e5763e9bc38b409bd36

Download | Favorite | View

OneNav Beta 0.9.12 Cross Site Scripting

Posted Aug 7, 2021

Authored by nu11secur1ty

OneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-38138

SHA-256 | 803274adb5909b1835e04650d9e1edee51c3d4b28380326211d5666dde18f8ee

Download | Favorite | View

Pandora FMS 7.54 Cross Site Scripting

Posted Jul 12, 2021

Authored by nu11secur1ty

Pandora FMS versions 7.54 and below suffer from a persistent cross site scripting vulnerability. This entry has been updated on 2021/07/23 with a fully automated version of the exploit.

tags | exploit, xss

advisories | CVE-2021-35501

SHA-256 | e75ede29d2db34274ca7f88965ac59c8b998641434d14fc01906dab37a2fd3e1

Download | Favorite | View

COVID-19 Testing Management System 1.0 SQL Injection

Posted Jun 8, 2021

Authored by nu11secur1ty

COVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.

tags | exploit, remote, sql injection

advisories | CVE-2021-33470

SHA-256 | 0a0103bf0a7eac9dcea23976913fe85ee3e02bab59a17d48ed4103f626bfc8c4

Download | Favorite | View

Local Service Search Engine Management System 1.0 SQL Injection

Posted Jun 2, 2021

Authored by nu11secur1ty

Local Service Search Engine Management System version 1.0 remote SQL injection exploit that leverages the original discovery by Aditya Wakhlu in December of 2020.

tags | exploit, remote, local, sql injection

advisories | CVE-2021-3278

SHA-256 | 30b6aaeeb041066b174beca7e2c68739a31ead9731d81b046760771d95b55046

Download | Favorite | View

Pandora FMS 6.0SP3 Cross Site Scripting

Posted May 27, 2021

Authored by nu11secur1ty

Pandora FMS version 6.0SP3 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-0527

SHA-256 | 3b6f367e28fda80ee9013841f4548d6f8dac15f5ef5c2407f7565d83c29588af

Download | Favorite | View

i-doit 1.15.2 Cross Site Scripting

Posted May 26, 2021

Authored by nu11secur1ty

i-doit version 1.15.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-3151

SHA-256 | 09bd54a79a7ea10a4acbf9651b08d12b5e851f8d241bfd83921b1cd5c24df50a

Download | Favorite | View

Spotweb-Develop 1.4.9 Cross Site Scripting

Posted May 20, 2021

Authored by nu11secur1ty

Spotweb-Develop version 1.4.9 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | edc08c2a5faaffc264b7ebd53bd4a33e8c3c676b0c81127f6aa98fce2d4127ad

Download | Favorite | View

b2evolution 7-2-2 SQL Injection

Posted May 6, 2021

Authored by nu11secur1ty

b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

advisories | CVE-2021-28242

SHA-256 | 8fcf6780fb886e3f47d5c83ca222ec282932c012986ba997bf2b83f2e8991aea

Download | Favorite | View

Piwigo 11.3.0 SQL Injection

Posted Apr 30, 2021

Authored by nu11secur1ty

Piwigo version 11.3.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

advisories | CVE-2021-27973

SHA-256 | 533a62f1f8e0052145c4e4a3cc6e36248076593a3246e51e8c573ba2c3b42ec6

Download | Favorite | View

SEO Panel 4.8.0 SQL Injection

Posted Apr 26, 2021

Authored by nu11secur1ty

SEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.

tags | exploit, remote, sql injection

advisories | CVE-2021-28419

SHA-256 | 1484a300db9ca4769e7f8862d2b2c8deb6c8fe61ea69d300b5d0d81c9690ea4a

Download | Favorite | View

DzzOffice 2.02.1 Cross Site Scripting

Posted Apr 23, 2021

Authored by nu11secur1ty

DzzOffice version 2.02.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-3318

SHA-256 | a88898d34a0dd38bd0a624051e9d6708e30ca923f0b025646fcc6f58fb4ea499

Download | Favorite | View

RemoteClinic 2 Cross Site Scripting

Posted Apr 21, 2021

Authored by nu11secur1ty

RemoteClinic 2 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2021-30044

SHA-256 | c45f8690b4b4bff71dc90d7b4222008bf3eb6231aed4384736a38bfc57fcbbcb

Download | Favorite | View

htmly 2.8.0 Cross Site Scripting

Posted Apr 15, 2021

Authored by nu11secur1ty, G.Dzhankushev

htmly version 2.8.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-30637

SHA-256 | 85e18bc2df9abe646cb059b1f16a9324d21a860943c8bb6dfbcd261cfcf66ba6

Download | Favorite | View

Horde Groupware Webmail 5.2.22 Cross Site Scripting

Posted Apr 15, 2021

Authored by nu11secur1ty, Ventsislav Varbanovski, Alex Birnberg

Horde Groupware Webmail version 5.2.22 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-26929

SHA-256 | ac0067ca0ac896cea878797665b7d40d5e0749684dd8782ac6396bcae1757783

Download | Favorite | View

Webmail Edition 5.2.22 XSS / Remote Code Execution

Posted Apr 14, 2021

Authored by nu11secur1ty, Ventsislav Varbanovski, Alex Birnberg

Webmail Edition version 5.2.22 suffers from remote code execution and cross site scripting vulnerabilities via the Horde_Text_Filter library.

tags | exploit, remote, vulnerability, code execution, xss

advisories | CVE-2021-26929

SHA-256 | 61274f1f45025235aa4f5b093517018fc749ec8ab469618084fac2fa0a8d6fe9

Download | Favorite | View

CASAP Automated Enrollment System 1.1 SQL Injection

Posted Mar 2, 2021

Authored by nu11secur1ty

CASAP Automated Enrollment System version 1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection

SHA-256 | 42eb07d9630195bb39e10b9baec9a00896bb2bb1cee634e40491dea6513c0e7b

Download | Favorite | View

Concrete5 8.5.4 Cross Site Scripting

Posted Mar 1, 2021

Authored by nu11secur1ty

Concrete5 version 8.5.4 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2021-3111

SHA-256 | ac19392af3a74934edad1a97ba2e0362afa7cc9ca0161dbd106631cf67d66b6b

Download | Favorite | View