GreenCMS 2.3.0603 - Cross-Site Request Forgery (Add Admin)
EDB-ID: 44826Author: longerPublished: 2018-06-03CVE: CVE-2018-11671 Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 2018-06-02 # Exploit Author: xichao # Vendor Homepage:...
View ArticleGreenCMS 2.3.0603 - Cross-Site Request Forgery / Remote Code Execution
EDB-ID: 44825Author: longerPublished: 2018-06-03CVE: CVE-2018-11670 Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 2018-06-02 # Exploit Author: xichao # Vendor Homepage:...
View ArticleSearchBlox 8.6.7 - XML External Entity Injection
EDB-ID: 44827Author: Ahmet GurelPublished: 2018-06-04CVE: CVE-2018-11586 Type: WebappsPlatform: JavaVulnerable App: N/A # Exploit Author: Ahmet GUREL, Canberk BOLAT # Software Link:...
View ArticleZip-n-Go 4.9 - Buffer Overflow (SEH)
EDB-ID: 44828Author: Hashim JawadPublished: 2018-06-04CVE: N/A Type: LocalPlatform: WindowsVulnerable App:...
View ArticleCyberArk < 10 - Memory Disclosure
EDB-ID: 44829Author: Thomas ZukPublished: 2018-06-04CVE: CVE-2018-9842 Type: RemotePlatform: LinuxVulnerable App: N/A # Date: 2018-06-04 # Exploit Author: Thomas Zuk # Vendor Homepage:...
View ArticleWindows - UAC Protection Bypass (Via Slui File Handler Hijack) (Metasploit)
EDB-ID: 44830Author: MetasploitPublished: 2018-06-04CVE: N/A Type: LocalPlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: Metasploit Framework (MSF), LocalVulnerable App: N/A # This module...
View ArticleEMS Master Calendar < 8.0.0.20180520 - Reflected Cross-Site Scripting
EDB-ID: 44831Author: Chris BarrettoPublished: 2018-06-04CVE: CVE-2018-11628 Type: WebappsPlatform: ASPXVulnerable App: N/A # Date: 2018-06-01 # Exploit Author: Chris Barretto # Vendor Homepage:...
View ArticleSEH Buffer Overflow Basic Exploitation Tutorial
This is a SEH buffer overflow basic exploitation tutorial. Written in Arabic.MD5 | d914b71bb22db16a92bb6096551d3397DownloadSource:packetstormsecurity.com
View ArticleGit Remote Code Execution
Git versions prior to 2.17.1 suffer from a code execution vulnerability.MD5 | e695985eb1d045c6e63efc8b6523d8faDownload# Exploit Title: Git (code execution)# Date: 2018-05-29# Exploit Author:...
View ArticleTP-Link TL-WR841N / TL-WR841ND Brute Force / CSRF
TP-Link TL-WR841N and TL-WR841ND suffer from brute force and cross site request forgery vulnerabilities.MD5 | 0d27ce55365e140e3c96b96c8b28f8cbDownloadHello list!There are Brute Force and Cross-Site...
View ArticleEpiphany 3.28.2.1 Denial Of Service
Epiphany version 3.28.2.1 suffers from a denial of service vulnerability.MD5 | 965dc4e23eb37e3a77857fea3e6a7c8cDownloadSummary:ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through...
View ArticleRSA Web Threat Detection SQL Injection
RSA Web Threat Detection versions prior to 6.4 suffer from a remote SQL injection vulnerability.MD5 | da45d5fb4c69ea30c9daadf2d661be63Download-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256DSA-2018-085:...
View ArticleSmartshop 1 SQL Injection
Smartshop version 1 suffers from a remote SQL injection vulnerability.MD5 | fd5e8e7c59a0c4ae68a32ac389b23846Download# Exploit Title: Smartshop 1 - SQL Injection# Date: 2018-06-02# Exploit Author: L0RD...
View ArticleSmartshop 1 Cross Site Request Forgery
Smartshop version 1 suffers from a cross site request forgery vulnerability.MD5 | a56064448d22daa2982e858c0d20cabdDownload# Exploit Title: Smartshop 1 - Cross site request forgery# Date: 2018-06-02#...
View ArticleZip-N-Go 4.9 Local Buffer Overflow
Zip-N-Go version 4.9 suffers from a local buffer overflow vulnerability.MD5 |...
View ArticleRash CMS 3.0 Cross Site Request Forgery
Rash CMS version 3.0 suffers from a cross site request forgery vulnerability.MD5 | 6e46dcede56d7ec7d67b85b47034cc19Download # Exploit Title: Rash CMS CSRF Vulnerability# Exploit Author: Hesam Bazvand#...
View ArticlePiazza Cross Site Request Forgery
Piazza.com suffered from a cross site request forgery vulnerability.MD5 | f39bcd742c0ee2d5f98406d608b99b59DownloadThere is an HTML version of this document with (now non-functional)demos at...
View ArticleGreenCMS 2.3.0603 Cross Site Request Forgery
GreenCMS version 2.3.0603 suffers from multiple cross site request forgery vulnerabilities.MD5 | e57861fdd513f54750775fc8e4ac2925DownloadExploit 1 of 2:# Exploit Title: GreenCMS v2.3.0603 CSRF...
View ArticleSearchBlox 8.6.7 XML External Entity Injection
SearchBlox version 8.6.7 suffers from an XML external entity injection vulnerability.MD5 | 641a7367fef2088ac2f146452d1fb7f6Download# Exploit Title: SearchBlox 8.6.7 Out-Of-Band XML eXternal Entity...
View ArticleCyberArk Memory Disclosure
CyberArk versions prior to 10 suffer from a memory disclosure vulnerability.MD5 | 0634eccb5a36fb21a4d15426597276afDownload# Exploit Title: CyberArk < 10 - Memory Disclosure# Date: 2018-06-04#...
View Article