Exploit the possiblities
Showing 76 - 100 of 39,716 RSS Feed

Exploit Files

OctoberCMS 1.0.426 (Build 426) Cross Site Request Forgery
Posted Nov 2, 2017
Authored by Zain Sabahat

OctoberCMS version 1.0.426 (Build 426) suffers from a cross site request forgery vulnerability.

tags | exploit, csrf
advisories | CVE-2017-16244
MD5 | 29c853f56b59ad6e4cb2b4757ef9e2c6
ZyXEL PK5001Z Modem Backdoor Account
Posted Nov 2, 2017
Authored by Matthew Sheimo

The ZyXEL PK5001Z modem has a hardcoded backdoor admin account that allows escalation to root.

tags | exploit, root
advisories | CVE-2016-10401
MD5 | bca3b4449d9fcb8fb0e87e0643eda104
News Magazine And Blog CMS 1.0 SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

News Magazine and Blog CMS version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15982
MD5 | 9f4bab3ca77531703dcefa759b8c273f
MyMagazine Magazine And Blog CMS 1.0 SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

MyMagazine Magazine and Blog CMS version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15983
MD5 | 4658cb8e1d19de46206690f6a0555626
CMS Lite 1.4 SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

Creative Management System CMS Lite version 1.4 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15984
MD5 | 6d6bb7ef41f981b567e136fb724ee283
Basic B2B Script SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

Basic B2B Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15985
MD5 | 0c9ad486cce622e731c68a61266405fe
CPA Lead Reward Script SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

CPA Lead Reward Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15986
MD5 | 558916d02a80acb2e76e6c0a883e125b
Fake Magazine Cover Script SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

Fake Magazine Cover Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15987
MD5 | 573e0c8d715e51ab511fc89086ffe6b2
Nice PHP FAQ Script SQL Injection
Posted Nov 2, 2017
Authored by Ihsan Sencan

Nice PHP FAQ Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, php, sql injection
advisories | CVE-2017-15988
MD5 | b4185cf54601d59702e05dc954376f11
Packet Storm New Exploits For October, 2017
Posted Nov 1, 2017
Authored by Todd J. | Site packetstormsecurity.com

This archive contains all of the 162 exploits added to Packet Storm in October, 2017.

tags | exploit
MD5 | 71e5efdfc6853913e1afe7fcc9881762
WhatsApp 2.17.52 Memory Corruption
Posted Nov 1, 2017
Authored by Juan Sacco

WhatsApp versions 2.17.52 and below suffer from a memory corruption vulnerability that can result in a denial of service.

tags | exploit, denial of service
MD5 | 52cf023f313d359776c21c2b3eebd1fb
WordPress User Login History 1.5.2 Cross Site Scripting
Posted Oct 31, 2017
Authored by Nicolas Buzy-Debat

WordPress User Login History plugin version 1.5.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2017-15867
MD5 | 55794b951aa88e688d42b194d06710b9
Progea Movicon 11.5.1181 Search Path Issues
Posted Oct 31, 2017
Authored by Karn Ganeshen

Progea Movicon versions 11.5.1181 and below suffer from search path related vulnerabilities.

tags | exploit, vulnerability
advisories | CVE-2017-14017, CVE-2017-14019
MD5 | 1de6e04aa62eca5a923d8fc55a9f1748
SpiderControl SCADA Web Server 2.02.0007 Improper Privilege Management
Posted Oct 31, 2017
Authored by Karn Ganeshen

SpiderControl SCADA Web Server versions 2.02.0007 and below suffer from an improper privilege management vulnerability.

tags | exploit, web
advisories | CVE-2017-12728
MD5 | d6acb33e7b8598a0c01679e484876aef
JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication
Posted Oct 31, 2017
Authored by Karn Ganeshen

JanTek JTC-200 RS232-NET Connector suffers from cross site request forgery and missing authentication vulnerabilities.

tags | exploit, vulnerability, csrf
advisories | CVE-2016-5789, CVE-2016-5791
MD5 | 020bc5ac941329974bf88c561dc914f2
Website Broker Script SQL Injection
Posted Oct 30, 2017
Authored by Ihsan Sencan

Website Broker Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15992
MD5 | c268db54348e06f2a891e1e4b8a0c162
Vastal I-Tech Agent Zone SQL Injection
Posted Oct 30, 2017
Authored by Ihsan Sencan

Vastal I-Tech Agent Zone suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15991
MD5 | 9eefe317c733dfe1b72c7b1be2b593be
Zomato Clone Script SQL Injection
Posted Oct 30, 2017
Authored by Ihsan Sencan

Zomato Clone Script suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15993
MD5 | f3b76106b5efbfbfb78a82cf61145a68
PHP Inventory Arbitrary File Upload
Posted Oct 30, 2017
Authored by Ihsan Sencan

PHP Inventory suffers from an arbitrary file upload vulnerability.

tags | exploit, arbitrary, php, file upload
advisories | CVE-2017-15990
MD5 | f0ea39e29684cdfddf40e9ddbea32ec3
Online Exam Test Application SQL Injection
Posted Oct 30, 2017
Authored by Ihsan Sencan

Online Exam Test Application suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
advisories | CVE-2017-15989
MD5 | d0a31c65ef54e756c675fc31b1f78950
WordPress Ultimate Product Catalog 4.2.24 PHP Object Injection
Posted Oct 30, 2017
Authored by tomplixsee

WordPress Ultimate Product Catalog plugin versions 4.2.24 and below suffer from a PHP object injection vulnerability.

tags | exploit, php
MD5 | 3f4ffd5d0fa22e90026bf5db1d8f6c0b
MitraStar DSL-100HN-T1/GPT-2541GNAC Privilege Escalation
Posted Oct 28, 2017
Authored by j0lama

MitraStar DSL-100HN-T1 and GPT-2541GNAC routers suffer from a privilege escalation vulnerability.

tags | exploit
MD5 | 9bd18e64e9682092e8293cf4eeb301a2
Android Private Internet Access Denial Of Service
Posted Oct 27, 2017
Authored by Yakov Shafranovich | Site wwws.nightwatchcybersecurity.com

The Android application provided by Private Internet Access (PIA) VPN service can be crashed by downloading a large file containing a list of current VPN servers. This can be exploited by an MITM attacker via intercepting and replacing this file. While the file is digitally signed, it is not served over SSL and the application did not contain logic for checking if the provided file is very large. The vendor has fixed this issue in version 1.3.3.1 and users should install the latest version.

tags | exploit, denial of service
advisories | CVE-2017-15882
MD5 | f39a851f2873bfcdf23e16b4dfb9ed46
Tizen Studio 1.3 Smart Development Bridge Buffer Overflow
Posted Oct 27, 2017
Authored by Marcin Kopec

Tizen Studio version 1.3 Smart Development Bridge versions prior to 2.3.2 buffer overflow proof of concept exploit.

tags | exploit, overflow, proof of concept
MD5 | e22467b2016604b70e379a7ceeb375e7
DameWare Remote Controller 12.0.0.520 Remote Code Execution
Posted Oct 27, 2017
Authored by Securifera

DameWare Remote Controller versions 12.0.0.520 and below suffer from a remote code execution vulnerability.

tags | exploit, remote, code execution
advisories | CVE-2016-2345
MD5 | 8c30f8a31a9271d0e9bbf103ee24be7b
Page 4 of 1,589
Back23456Next

File Archive:

November 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    22 Files
  • 2
    Nov 2nd
    28 Files
  • 3
    Nov 3rd
    10 Files
  • 4
    Nov 4th
    1 Files
  • 5
    Nov 5th
    5 Files
  • 6
    Nov 6th
    15 Files
  • 7
    Nov 7th
    15 Files
  • 8
    Nov 8th
    13 Files
  • 9
    Nov 9th
    9 Files
  • 10
    Nov 10th
    9 Files
  • 11
    Nov 11th
    3 Files
  • 12
    Nov 12th
    2 Files
  • 13
    Nov 13th
    15 Files
  • 14
    Nov 14th
    17 Files
  • 15
    Nov 15th
    19 Files
  • 16
    Nov 16th
    15 Files
  • 17
    Nov 17th
    19 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close