what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 76 - 100 of 100

Files

Joomla Package SQL Injection

Posted Aug 6, 2012

Authored by Chokri Ben Achor, Vulnerability Laboratory | Site vulnerability-lab.com

The Joomla Package component suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 8e0d07408dd254a57780cf1b916f1db843819bf3e73affbb15a99a5037a6688b

Download | Favorite | View

Related Files

WordPress Complete Gallery Manager 3.3.3 File Upload

Posted Sep 19, 2013

Authored by Fuad Pilus, Vulnerability Laboratory

WordPress Complete Gallery Manager version 3.3.3 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 30600a42195af3e9dafb7dd91b072eaf413f11eb0a730f8d5b36d9226bcdafde

Download | Favorite | View

eTransfer Lite 1.0 Cross Site Scripting

Posted Sep 10, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

eTransfer Lite version 1.0 suffers from a script insertion vulnerability that allows for cross site scripting.

tags | exploit, xss

SHA-256 | 4292affcfdf011e545c9a50226c257f5ffe16370fce98ba39450fd65b9ab10c1

Download | Favorite | View

Talkie Bluetooth Video iFiles 2.0 XSS / DoS / LFI / File Upload

Posted Sep 10, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Talkie Bluetooth Video iFiles version 2.0 suffers from arbitrary file upload, denial of service, local file inclusion, and cross site scripting vulnerabilities.

tags | exploit, denial of service, arbitrary, local, vulnerability, xss, file inclusion, file upload

SHA-256 | e9084df0530e5e98e8b715553f4b0b7af3d61274ef417e69c4e53ab773494132

Download | Favorite | View

Microsoft MSRC RSS ASPX Cross Site Scripting

Posted Aug 29, 2013

Authored by Mohd. Shadab Siddiqui, Vulnerability Laboratory | Site vulnerability-lab.com

Microsoft Online Services suffered from a cross site scripting vulnerability. Note that this finding houses site-specific data.

tags | exploit, xss

SHA-256 | ac8f587b214e78fe60fc63bef72a529ea7ee0d7a2fe599ea1178e65161a44489

Download | Favorite | View

Paypal Account Deletion

Posted Aug 23, 2013

Authored by Cernica Ionut Cosmin, Vulnerability Laboratory | Site vulnerability-lab.com

Paypal suffers from an arbitrary account deletion vulnerability that leverages unvalidated email account additions.

tags | exploit, arbitrary

SHA-256 | 841c2aec9aded6aabc4378df632abfd8fa15c280ccb7f358a5f308e52fa80358

Download | Favorite | View

Photo Transfer Upload 1.0 LFI / Shell Upload / XSS

Posted Aug 15, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Photo Transfer Upload version 1.0 for iOS suffers from cross site scripting, local file inclusion, and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, xss, file inclusion

systems | cisco, ios

SHA-256 | 9797a90f4d101bc559e0e7a955fc1029afada224bfd37dbdb8bd0fc40a9ac16e

Download | Favorite | View

Copy To WebDAV 1.1 LFI / Shell Upload / Command Injection

Posted Aug 15, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Copy to WebDAV version 1.1 for iOS suffers from local file inclusion, command injection, and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, file inclusion

systems | cisco, ios

SHA-256 | 23dcf46f528554d76be9439abab500204ea1dfc338b343174897859c0b85f712

Download | Favorite | View

Microsoft Yammer Social Network O-Auth Bypass

Posted Aug 7, 2013

Authored by Ateeq ur Rehman Khan, Vulnerability Laboratory | Site vulnerability-lab.com

Microsoft Yammer Social Network suffered from a critical information disclosure vulnerability due to an insecure O-Auth 2 implementation.

tags | exploit, info disclosure

SHA-256 | ee17ca110cf9ff28ea039cf6aeaf554e36835d8cc584b07592f7aea1af5a528a

Download | Favorite | View

FTP OnConnect 1.4.11 File Inclusion / Shell Upload / XSS

Posted Aug 6, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

FTP OnConnect version 1.4.11 for iOS suffers from cross site scripting, local file inclusion, and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, xss, file inclusion

systems | cisco, ios

SHA-256 | bb55ba47f6a209dbe1f097db9b534ff474623b79856c410adde1ba4910ba1d61

Download | Favorite | View

withU Music Share 1.3.7 Command Injection

Posted Aug 6, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

withU Music Share version 1.3.7 for iOS suffers from a command injection vulnerability.

tags | exploit

systems | cisco, ios

SHA-256 | 65c6ae752918c5271605b01b555331833389c6e6428012bac903c745772cb943

Download | Favorite | View

WebDisk 3.0.2 PhotoViewer iOS Command Execution

Posted Jul 29, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

WebDisk version 3.0.2 PhotoViewer for iOS suffers from a remote command execution vulnerability.

tags | exploit, remote

systems | cisco, ios

SHA-256 | a74a5bd33336150b25147766ce88ce05cc03a56a2927ac49301a7b6d2986f69b

Download | Favorite | View

Private Photos 1.0 Script Insertion

Posted Jul 29, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Private Photos version 1.0 for iOS suffers from a persistent script insertion vulnerability.

tags | exploit

systems | cisco, ios

SHA-256 | 675393a5ef46624db7acc97471d1f5ccdb744cecce7d6c64116194fd6fc7a6b1

Download | Favorite | View

iPic Sharp 1.2.1 Wifi Script Insertion

Posted Jul 24, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

iPic Sharp version 1.2.1 Wifi for iOS suffers from a local script insertion issue.

tags | exploit, local

systems | cisco, ios

SHA-256 | a5433fa7faac6fc77af274a37017e674b24332ffbee28a83a05ba18a5f260d4c

Download | Favorite | View

Photo Server 2.0 Shell Upload / Command Injection

Posted Jul 22, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Photo Server version 2.0 suffers from remote shell upload and command injection vulnerabilities.

tags | exploit, remote, shell, vulnerability

SHA-256 | 149ec4f509df9c7841d47111e32d365b17fccc1ffcff2c4cc0364c89074f6895

Download | Favorite | View

Download Lite 4.3 Cross Site Scripting

Posted Jul 19, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Download Lite version 4.3 for iOS suffers from a persistent script insertion vulnerability.

tags | exploit

systems | ios

SHA-256 | 82e4453c93d34a4a9eeb5244557c1b3b482d6fd62ca90297b2309e440e3d8357

Download | Favorite | View

ePhoto Transfer 1.2.1 XSS / DoS / Command Injection

Posted Jul 18, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

ePhoto Transfer version 1.2.1 for iOS suffers from cross site scripting, denial of service, and command injection vulnerabilities.

tags | exploit, denial of service, vulnerability, xss

SHA-256 | b760dca188157850efec772c653425fb6915a3d91cdcb48fcb82b2b3a9dce9b4

Download | Favorite | View

Flux Player 3.1.0 LFI / Shell Upload

Posted Jul 18, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Flux Player version 3.1.0 for iOS suffers from local file inclusion and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, file inclusion

SHA-256 | 465c1518ad65e7480d885d0a2f972364b3e3056cb6929a00c3d865700721eb31

Download | Favorite | View

WiFly 1.0 Pro Local File Inclusion / Shell Upload

Posted Jul 18, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

WiFly version 1.0 Pro for iOS suffers from local file inclusion and remote shell upload vulnerabilities.

tags | exploit, remote, shell, local, vulnerability, file inclusion

SHA-256 | 9751e2310d25b8f3052a555036d3c6fb9a08e73ed5071f891c6994938f2c160d

Download | Favorite | View

Olive File Manager 1.0.1 Arbitrary File Upload / XSS

Posted Jul 16, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Olive File Manager version 1.0.1 for iOS suffers from arbitrary file upload and cross site scripting vulnerabilities.

tags | exploit, arbitrary, vulnerability, xss, file upload

systems | ios

SHA-256 | 4923d8db6286e1cf6917d43aa359d9d1dbc6d093111aca760cfae1f6c1112cbc

Download | Favorite | View

FTP Sprite 1.2.1 Script Insertion

Posted Jul 16, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

FTP Sprite version 1.2.1 for iOS suffers from a persistent script insertion vulnerability.

tags | exploit

systems | ios

SHA-256 | b17f9f86c93c7d304115e7a035b5f7635cf9f925526f289c29667e10571460d8

Download | Favorite | View

Nikon CoolPix L Series Fw 1.0 Information Disclosure

Posted Jul 16, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Nikon CoolPix L Series Fw version 1.0 suffers from an information disclosure vulnerability.

tags | exploit, info disclosure

SHA-256 | 00c5dc25f1958967070a5163d5ecb6dda8b5bb295f0fb9e5d15b3cce7642bdc8

Download | Favorite | View

Air Drive Plus 2.4 LFI / XSS / File Upload

Posted Jul 11, 2013

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Air Drive Plus version 2.4 for iOS suffers from local file inclusion, script inclusion, and remote arbitrary file upload vulnerabilities.

tags | exploit, remote, arbitrary, local, vulnerability, file inclusion, file upload

systems | ios

SHA-256 | 3962cd3187d8ce7cf9f15f89a34bc0f1974a6495c284a9cead16289b31d87156

Download | Favorite | View

ME Monitoring Manager Cross Site Scripting / SQL Injection

Posted Jan 29, 2012

Authored by Benjamin Kunz Mejri, Pim J.F. Campers, Vulnerability Laboratory | Site vulnerability-lab.com

ME Monitoring Manager versions 9.x and 10.x suffer from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 27495ed2f2e058fb3695234a4e0de35c6432d8dc1b07b45b11e1b624e0d050bf

Download | Favorite | View

iGuard Biometric Access Control Cross Site Scripting

Posted Nov 8, 2011

Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

iGuard Biometric Access Control suffers from multiple input validation vulnerabilities that can allow for cross site scripting.

tags | advisory, vulnerability, xss

SHA-256 | 74523d19a1d84fe05e4678503b1d3643a36da019ed5c9839e2563d179e167269

Download | Favorite | View

Joomla Packages SQL Injection

Posted May 19, 2010

Authored by Kernel Security Group

The Joomla Packages component suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | fbc1529f7de09d092dc3aaf813a3856013e36f4c99e7e97047d5b69145a9960a

Download | Favorite | View