SourceTree Remote Code Execution
SourceTree suffers from multiple remote code execution vulnerabilities that can be triggered via hostile repositories being checked in. SourceTree for macOS versions prior to 2.6.1 and SourceTree for...
View ArticleIWEBSOUL CMS 1.0 Cross Site Scripting
IWEBSOUL CMS version 1.0 suffers from multiple cross site scripting vulnerabilities.MD5 | 1bb059a3c04d173392bc1620657df949DownloadTitle:=======IWEBSOUL CMS - Multiple Cross Site Scripting...
View ArticleIWEBSOUL CMS 1.0 SQL Injection
IWEBSOUL CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.MD5 | 4201f7e8a2fb993b459c37b1ec9f9fdeDownloadTitle:=======IWEBSOUL CMS - Multiple SQL...
View ArticleTor Linux Sandbox Breakout Via X11
It appears that you can still talk to X11 outside of the Tor sandbox.MD5 | 21d81cf14e7577ac16e4401020dd33e8DownloadTor: Linux sandbox breakout via X11From inside the Linux sandbox described in...
View ArticlePay Banner Text Link Ad 1.0.6.1 SQL Injection
Pay Banner Text Link Ad version 1.0.6.1 suffers from a remote SQL injection vulnerability.MD5 | 7eb043bbbbf68fc9637d5484ba289b4dDownload# # # # # # Exploit Title: Pay Banner Text Link Ad 1.0.6.1 - SQL...
View ArticlePay Banner Text Link Ad 1.0.6.1 Cross Site Request Forgery
Pay Banner Text Link Ad version 1.0.6.1 suffers from a cross site request forgery vulnerability.MD5 | 58ad83ebdd2f80e7cd6f5d2b87c3d850Download# # # # # # Exploit Title: Pay Banner Text Link Ad 1.0.6.1...
View ArticleJungo DriverWizard WinDrive OOB Write Privilege Escalation
Jungo DriverWizard WinDriver suffers from a kernel out-of-bounds write privilege escalation vulnerability.MD5 | 6edc74e9034a9a04f7346f71a99e0576Download -*- coding: utf-8 -*-"""Jungo DriverWizard...
View ArticleJungo DriverWizard WinDrive Overflow
Jungo DriverWizard WinDrive suffers from a kernel pool overflow vulnerability.MD5 | eb4b94ca20d9b324a50f0d3ed5dbbed4Download# -*- coding: utf-8 -*-"""Jungo DriverWizard WinDriver Kernel Pool Overflow...
View ArticleApache Struts 2.5.12 XStream Remote Code Execution
Apache Struts versions 2.5 through 2.5.12 REST plugin XStream remote code execution exploit.MD5 | ed713b2c9934090617c90e450993d42dDownload# Exploit Title: Struts 2.5 - 2.5.12 REST Plugin XStream RCE#...
View ArticleOnline Invoice System 3.0 - SQL Injection
EDB-ID: 42629Author: Ihsan SencanPublished: 2017-09-07CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Online Invoice System 3.0 - SQL Injection # Dork: N/A # Date: 07.09.2017 #...
View ArticleMahara Resume Blocktype Cross Site Scripting Vulnerability
Mahara is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.An attacker may leverage this issue to execute arbitrary script code...
View ArticleGh0st Client - Buffer Overflow (Metasploit)
EDB-ID: 42630Author: MetasploitPublished: 2017-09-07CVE: N/A Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: Metasploit FrameworkVulnerable App: N/A # This module requires...
View ArticleEzBan 5.3 - 'id' Parameter SQL Injection
EDB-ID: 42631Author: Ihsan SencanPublished: 2017-09-07CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: EzBan - Banner Management System 5.3 - SQL Injection # Dork: N/A # Date:...
View ArticleEzInvoice 6.02 - SQL Injection
EDB-ID: 42632Author: Ihsan SencanPublished: 2017-09-07CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection # Dork: N/A #...
View ArticleHuawei HG255s - Directory Traversal
EDB-ID: 42634Author: Ahmet MersinPublished: 2017-09-07CVE: N/A Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: [07.09.2017] # Exploit Author: [Ahmet Mersin] # Vendor Homepage:...
View ArticleRoteador Wireless Intelbras WRN150 - Cross-Site Scripting
EDB-ID: 42633Author: Elber TavaresPublished: 2017-09-07CVE: CVE-2017-14219 Type: WebappsPlatform: HardwareVulnerable App: N/A # Date: 07/09/2017 # Exploit Author: Elber Tavares # Vendor Homepage:...
View ArticleAerohive Networks HiveManager Remote Shell Upload
Aerohive Networks HiveManager Classic Online NMS suffers from a remote shell upload vulnerability.MD5 | c7a05d84a6ceaa5379e1b1bb8508ce38DownloadI. BACKGROUNDAerohive Networks HiveManager Classic Online...
View ArticleEzInvoice Invoice Management System 6.0.2 SQL Injection
EzInvoice Invoice Management System version 6.0.2 suffers from a remote SQL injection vulnerability.MD5 | 73d5e129b6786bcb0153d8f2e0254789Download# # # # # # Exploit Title: EzInvoice - Invoice...
View ArticleEzBan 5.3 SQL Injection
EzBan version 5.3 suffers from a remote SQL injection vulnerability.MD5 | 94cc86af2d6ec9741817ec0a4bce6358Download# # # # # # Exploit Title: EzBan - Banner Management System 5.3 - SQL Injection# Dork:...
View ArticleHuawei HG255s Directory Traversal
Huawei HG255s suffers from a directory traversal vulnerability.MD5 | adeb025562e7f5dd4093670510800427Download# Exploit Title: [Server Directory Traversal at Huawei HG255s]# Date: [07.09.2017]# Exploit...
View Article