Technicolor TC7337 - SSID Persistent Cross-Site Scripting
EDB-ID: 42427Author: Geolado gioladoPublished: 2017-08-03CVE: CVE-2017-11320 Type: WebappsPlatform: HardwareVulnerable App: N/A // Vulnerable URL : https://your.rou.ter.ip/wlscanresults.html // XSS...
View ArticleVirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege...
EDB-ID: 42426Author: Google Security ResearchPublished: 2017-08-03CVE: CVE-2017-10129 Type: LocalPlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: LocalVulnerable App: N/A VirtualBox: Windows...
View ArticleMuviko 1.0 SQL Injection
Muviko version 1.0 suffers from a remote SQL injection vulnerability.MD5 | a2f470f94db29897030641d4eb497903DownloadExploit Title: Muviko - Video CMS v1.0 a 'q' Parameter SQL InjectionDate:...
View ArticleEDUMOD Pro 1.3 SQL Injection
EDUMOD Pro version 1.3 suffers from a remote SQL injection vulnerability.MD5 | f46e8beda775ea98ff9dc7d2b03635e7DownloadExploit Title: School Management System | EDUMOD Pro v1.3 a SQL InjectionDate:...
View ArticlePremium Servers List Tracker 1.0 SQL Injection
Premium Servers List Tracker version 1.0 suffers from a remote SQL injection vulnerability.MD5 | 0309c850437fbb50c544f416771cb8a4DownloadExploit Title: Premium Servers List Tracker v1.0 a SQL...
View ArticleDNSTracer 1.9 Buffer Overflow
DNSTracer version 1.9 suffers from a buffer overflow vulnerability.MD5 | 2e16347220a1cfdb358f075642a51b5aDownload# Exploit Title: DNSTracer 1.9 - Buffer Overflow# Google Dork: [if applicable]# Date:...
View ArticleVirtualBox indows Process DLL Signature Bypass Privilege Escalation
VirtualBox suffers from a privilege escalation vulnerability due to a windows process DLL signature bypass vulnerability.MD5 | e1476610f1872866ca63ea58ddd4a886DownloadSource:packetstormsecurity.com
View ArticleVirtualBox Windows Process DLL UNC Path Signature Bypass Privilege Escalation
VirtualBox suffers from a privilege escalation vulnerability due to a windows process DLL UNC path signature bypass vulnerability.MD5 |...
View ArticleAxis 2100 Network Camera 2.43 Cross Site Scripting
Axis 2100 Network Camera version 2.43 suffers from a cross site scripting vulnerability.MD5 | ece4df6e4c1f4cd6a9cfc25c4e346144Downloadi>>?[+] Title: Axis 2100 Network Camera 2.43 - Reflected...
View ArticleJoomla! Component StreetGuessr Game 1.1.8 - SQL Injection
EDB-ID: 42423Author: Ihsan SencanPublished: 2017-08-03CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Joomla! Component StreetGuessr Game v1.1.8 - SQL Injection # Dork: N/A #...
View ArticleLinux Kernel 4.12 Race Condition
A race condition was found in the Linux kernel versions 3.14-rc1 through 4.12. The race happens between threads of inotify_handle_event() and vfs_rename() while running the rename operation against the...
View ArticlephpBB 3.2.0 Server Side Request Forgery
phpBB version 3.2.0 suffers from a server-side request forgery vulnerability.MD5 | 491d40937af7fb079e9d9856baf6aecbDownloadSEC Consult Vulnerability Lab Security Advisory < 20170804-0...
View ArticleUbiquiti Networks UniFi Cloud Key Firmware 0.6.1 Command Injection
Ubiquiti Networks UniFi Cloud Key with firmware version 0.6.1 suffers from an authenticated command injection vulnerability.MD5 | cec2c4c027f77927bb4c9350db9a32baDownloadSEC Consult Vulnerability Lab...
View ArticleWordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting
WordPress GamePlan Event and Gym Fitness theme versions 1.0 through 1.5.13.2 suffer from a cross site scripting vulnerability.MD5 | 97cfd226457ec58c7e9cb177b313cc17Download# Exploit Title: GamePlan...
View ArticleLinux x86 - /bin/sh Shellcode (24 bytes)
EDB-ID: 42428Author: Touhid M.ShaikhPublished: 2017-08-06CVE: N/A Type: ShellcodePlatform: Lin_x86Shellcode: Download / View Raw Shellcode Size: 24 bytes ;Title: Linux/x86 - /bin/sh Shellcode ;Author:...
View ArticleMicrosoft Windows - LNK Shortcut File Code Execution
EDB-ID: 42429Author: nixawkPublished: 2017-08-06CVE: CVE-2017-8464 Type: LocalPlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A # -*- coding: utf-8 -*- # Title :...
View ArticleWordPress Plugin Easy Modal 2.0.17 - SQL Injection
EDB-ID: 42431Author: defensecodePublished: 2017-08-07CVE: N/A Type: WebappsPlatform: PHPAliases: N/AAdvisory/Source: N/ATags: SQL Injection (SQLi)Vulnerable App: WordPress Easy Modal Plugin Multiple...
View ArticleMicrosoft Windows 7 SP1 x86 - GDI Palette Objects Local Privilege Escalation...
EDB-ID: 42432Author: SaifPublished: 2017-07-19CVE: N/A Type: LocalPlatform: WindowsAliases: MS17-017_PALAdvisory/Source: LinkTags: N/AVulnerable App: N/A # + Source:...
View ArticleSAP NetWeaver Logon Application URI Redirection Vulnerability
SAP NetWeaver is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and...
View ArticleSAP NetWeaver K.M. Web Page Composer URI Redirection Vulnerability
SAP NetWeaver is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and...
View Article