HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution
This Metasploit module exploits a remote command execution vulnerability in HP LoadRunner before 9.50 and also HP Performance Center before 9.50. HP LoadRunner 12.53 and other versions are also most...
View ArticlePHP Melody 2.7.1 - 'playlist' SQL Injection
EDB-ID: 43409Author: Ahmad MahfouzPublished: 2017-12-31CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 30/12/2017 # Exploit Author: Ahmad Mahfouz # Contact: http://twitter.com/eln1x #...
View ArticleD3DGear 5.00 Build 2175 - Buffer Overflow
EDB-ID: 43410Author: bzyoPublished: 2017-12-31CVE: N/A Type: DosPlatform: WindowsVulnerable App: N/A # # Exploit Author: bzyo # Twitter: @bzyo_ # Exploit Title: D3DGear 5.00 Build 2175 - Buffer...
View ArticleWikipedia Search Engine 1.0 Cross Site Scripting
Wikipedia Search Engine version 1.0 suffers from a cross site scripting vulnerability.MD5 | 9ae8d341ce76a50b6fd95a341bf1292cDownload# Exploit Title: Wikipedia Search Engine PHP - xss# Google Dork: N/A#...
View ArticlePhoto Fusion 1.0 Cross Site Scripting
Photo Fusion version 1.0 suffers from a persistent cross site scripting vulnerability.MD5 | adf92b44bc5aeaf41e4fad0f16273b72Download# Exploit Title: Photo Fusion - Free Stock Photos Script - Xss#...
View ArticleChatting System PHP Ajax MySQL JavaScript 1.0 Cross Site Scripting
Chatting System PHP Ajax MySQL JavaScript version 1.0 suffers from a cross site scripting vulnerability.MD5 | 8080ac0081699a839acf51f994db6389Download# Exploit Title: Chatting System PHP Ajax MySQL...
View ArticleAuto Generate Data Sample 1.0 Cross Site Scripting
Auto Generate Data Sample version 1.0 suffers from a cross site scripting vulnerability.MD5 | de0ecc31e33d9e22154dcb3468b6a6c0Download# Exploit Title: Auto Generate Data Sample PHP - xss# Google Dork:...
View ArticleChatting System PHP Ajax MySQL JavaScript 1.0 Shell Upload
Chatting System PHP Ajax MySQL JavaScript version 1.0 suffers from a remote shell upload vulnerability.MD5 | 6965ee7b894ef707384f83dda4e6dd4aDownload# Exploit Title: Chatting System PHP Ajax MySQL...
View ArticleD3DGear 5.00 Build 2175 Buffer Overflow
D3DGear version 5.00 build 2175 suffers from a buffer overflow vulnerability.MD5 | c644aaacab99ed7481c5ea9a2577ae79Download#!/usr/bin/python## Exploit Author: bzyo# Twitter: @bzyo_# Exploit Title:...
View ArticlePHP Melody 2.7.1 SQL Injection
PHP Melody version 2.7.1 suffers from a remote SQL injection vulnerability.MD5 | 7397857681410133de87923b564c1da0Download# Exploit Title: PHP Melody v2.7.1 - SQL Injection# Date: 30/12/2017# Exploit...
View ArticleEasy Web Grabber 1.0.0 Cross Site Scripting
Easy Web Grabber version 1.0.0 suffers from a persistent cross site scripting vulnerability.MD5 | 1b61b1b865df691a1b85a1ae03c03286Download# Exploit Title: Easy Web Grabber PHP - xss# Google Dork: N/A#...
View ArticleJoomla! JEXTN Membership 3.1.0 SQL Injection
Joomla! JEXTN Membership component version 3.1.0 suffers from a remote SQL injection vulnerability.MD5 | 5f1419e50ed85b94dd410fc19bfd6d79Download#################################################Title:...
View ArticleJoomla! JEXTN Groupbuy 4.0.0 Cross Site Scripting
Joomla! JEXTN Groupbuy component version 4.0.0 suffers from a cross site scripting vulnerability.MD5 | 6f4616b74621814d939e232a5a2a965cDownload#################################################Title:...
View ArticleHP Mercury LoadRunner Agent magentproc.exe - Remote Command Execution...
EDB-ID: 43411Author: MetasploitPublished: 2018-01-01CVE: CVE-2010-1549 Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: Metasploit Framework (MSF)Vulnerable App: N/A # This module...
View ArticleCambium ePMP1000 - 'get_chart' Shell via Command Injection (Metasploit)
EDB-ID: 43413Author: MetasploitPublished: 2018-01-01CVE: CVE-2017-5255 Type: RemotePlatform: CGIAliases: N/AAdvisory/Source: LinkTags: Metasploit Framework (MSF)Vulnerable App: N/A # This module...
View ArticleCambium ePMP1000 - 'ping' Shell via Command Injection (Metasploit)
EDB-ID: 43412Author: MetasploitPublished: 2018-01-01CVE: N/A Type: RemotePlatform: UnixAliases: N/AAdvisory/Source: LinkTags: Metasploit Framework (MSF)Vulnerable App: N/A # This module requires...
View ArticleHuawei Router HG532 - Arbitrary Command Execution
EDB-ID: 43414Author: anonymousPublished: 2017-12-25CVE: CVE-2017–17215 Type: WebappsPlatform: HardwareAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A from requests.auth import...
View ArticleApple macOS - IOHIDSystem Kernel Read/Write
EDB-ID: 43415Author: SiguzaPublished: 2018-01-01CVE: N/A Type: DosPlatform: macOSAliases: IOHIDeousAdvisory/Source: LinkTags: N/AVulnerable App: N/A https://siguza.github.io/IOHIDeous/...
View ArticleLibTIFF CVE-2017-17973 Memory Corruption Vulnerability
LibTIFF is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application using the affected library. Failed...
View ArticleApple macOS 'IOHIDFamily' Component Local Privilege Escalation Vulnerability
Apple macOS is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary code and gain root access on the affected system. InformationBugtraq ID:...
View Article