phpMyAdmin 4.8.1 - Local File Inclusion
EDB-ID: 44928Author: VulnSpyPublished: 2018-06-22CVE: CVE-2018-12613 Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 2018-06-21 # Exploit Author: VulnSpy # Vendor Homepage:...
View ArticleGreenCMS 2.3.0603 - Information Disclosure
EDB-ID: 44922Author: vr_systemPublished: 2018-06-22CVE: CVE-2018-12604 Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 2018-06-21 # Exploit Author: vr_system # Vendor Homepage:...
View ArticlephpMyAdmin 4.8.1 Local File Inclusion
phpMyAdmin version 4.8.1 suffers from an authenticated local file inclusion vulnerabilities.MD5 | afa380964419c4b6f6b9f6f2f215923dDownloadThe latest version downloaded from the official website, the...
View ArticleGreenCMS 2.3.0603 Information Disclosure
GreenCMS version 2.3.0603 suffers from a sensitive information disclosure vulnerability.MD5 | ecd355d0e5958d96b8b889b5395021d9Download# Exploit Title: GreenCMS 2.3.0603 - remote obtain sensitive...
View ArticlephpLDAPadmin 1.2.2 LDAP Injection
phpLDAPadmin version 1.2.2 suffers from a server_id LDAP injection vulnerability.MD5 | 80926eb5b3ab1b86753600249c8e99d2Download# Exploit Title: phpLDAPadmin 1.2.2 - 'server_id' LDAP Injection...
View ArticlephpMyAdmin 4.8.1 Code Execution / Local File Inclusion
phpMyAdmin version 4.8.1 suffers from a local file inclusion vulnerability that can lead to code execution.MD5 | eb2702b935164a2120d6eb7be48ae476Download# Exploit Title: phpMyAdmin 4.8.1 - Local File...
View ArticleQEMU Guest Agent 2.12.50 Denial Of Service
QEMU Guest Agent version 2.12.50 suffers from a denial of service vulnerability.MD5 | b12854edacb2fa3c3802ea55c15c6616Download# Exploit Title: QEMU Guest Agent 2.12.50 - Denial of Service# Date:...
View ArticleLaraChurch 1.0 Shell Upload
LaraChurch Complete Church Management System version 1.0 suffers from a remote shell upload vulnerability.MD5 | a7ae782a86b42876fe361349f6cdae3cDownload# Exploit Title: LaraChurch - Complete Church...
View ArticleFortinet FortiManager CVE-2018-1351 Cross Site Scripting Vulnerability
Fortinet FortiManager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
View ArticleDIGISOL DG-BR4000NG - Cross-Site Scripting
EDB-ID: 44935Author: Adipta BasuPublished: 2018-06-25CVE: CVE-2018-12705 Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: 2018-06-24 # Vendor Homepage: http://www.digisol.com # Hardware...
View ArticleIntex Router N-150 - Arbitrary File Upload
EDB-ID: 44939Author: Samrat DasPublished: 2018-06-25CVE: N/A Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: 2018-06-23 # Exploit Author: Samrat Das # Version: N-150 # CVE : N/A # Category:...
View ArticleDIGISOL DG-BR4000NG - Buffer Overflow (PoC)
EDB-ID: 44934Author: Adipta BasuPublished: 2018-06-25CVE: CVE-2018-12706 Type: DosPlatform: HardwareVulnerable App: N/A # Date 2018-06-24 # Vendor Homepage† http://www.digisol.com # Hardware Link...
View ArticleWordpress Plugin Comments Import & Export < 2.0.4 - CSV Injection
EDB-ID: 44940Author: Bhushan B. PatilPublished: 2018-06-25CVE: CVE-2018-11526 Type: WebappsPlatform: PHPVulnerable App: N/A # Google Dork: N/A # Date: 2018-06-24 # Exploit Author: Bhushan B. Patil #...
View ArticleFoxit Reader 9.0.1.1049 - Remote Code Execution
EDB-ID: 44941Author: mr_mePublished: 2018-06-25CVE: CVE-2018-9948... Type: RemotePlatform: WindowsVulnerable App: 1 0 obj <</Pages 1 0 R /OpenAction 2 0 R>> 2 0 obj <</S /JavaScript...
View ArticleWordPress Plugin iThemes Security 7.0.2 - SQL Injection
EDB-ID: 44943Author: Çlirim EminiPublished: 2018-06-25CVE: CVE-2018-12636 Type: WebappsPlatform: PHPVulnerable App: # Date: 2018-06-25 # Exploit Author: Çlirim Emini # Website:...
View ArticleWordpress Plugin Advanced Order Export For WooCommerce < 1.5.4 - CSV Injection
EDB-ID: 44931Author: Bhushan B. PatilPublished: 2018-06-25CVE: CVE-2018-11525 Type: WebappsPlatform: PHPVulnerable App: N/A # Google Dork: N/A # Date: 2018-06-24 # Exploit Author: Bhushan B. Patil #...
View ArticleEcessa Edge EV150 10.7.4 - Cross-Site Request Forgery (Add Superuser)
EDB-ID: 44932Author: LiquidWormPublished: 2018-06-25CVE: N/A Type: WebappsPlatform: LinuxVulnerable App: N/A # Author: LiquidWorm # Date: 2018-05-21 # Vendor: Ecessa Corporation # Product web page:...
View ArticleEcessa ShieldLink SL175EHQ < 10.7.4 - Cross-Site Request Forgery (Add...
EDB-ID: 44938Author: LiquidWormPublished: 2018-06-25CVE: N/A Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: 2018-05-21 # Vendor: Ecessa Corporation # Product web page:...
View ArticleEcessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
EDB-ID: 44936Author: LiquidWormPublished: 2018-06-25CVE: N/A Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: 2018-05-21 # Author: LiquidWorm # Vendor: Ecessa Corporation # Product web page:...
View ArticleTravel Agency 1.1 - 'cid' SQL Injection
EDB-ID: 44930Author: Ashkan MoghaddasPublished: 2018-06-25CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Data: 2018-06-23 # Exploit Author: Ashkan Moghaddas # Tested on: Windows - Linux #...
View Article