inClick Cloud Server 5.0 - SQL Injection
EDB-ID: 42663Author: Ihsan SencanPublished: 2017-09-12CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: inClick Cloud Server 5.0 - SQL Injection # Dork: N/A # Date: 12.09.2017 #...
View ArticleWebKit JSC - 'BytecodeGenerator::emitGetByVal' Incorrect Optimization
EDB-ID: 42666Author: Google Security ResearchPublished: 2017-09-12CVE: CVE-2017-7061 Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A let o = {}; for (let i in...
View ArticleJungo DriverWizard WinDriver
EDB-ID: 42665Author: mr_mePublished: 2017-09-12CVE: CVE-2017-14344 Type: LocalPlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A """ Jungo DriverWizard WinDriver Kernel Pool...
View ArticleinClick Cloud Server 5.0 SQL Injection
inClick Cloud Server version 5.0 suffers from a remote SQL injection vulnerability.MD5 | e21d849f6e697c28e650ffb22167025bDownload# # # # # # Exploit Title: inClick Cloud Server 5.0 - SQL Injection#...
View ArticleSAP E-Recruiting Email Verification Bypass
SAP E-Recruiting versions 605, 606, 616, and 617 suffer from an email verification bypass vulnerability.MD5 | bd82d9bed91744c5d4882ea45c5811e1DownloadSEC Consult Vulnerability Lab Security Advisory...
View ArticleMLM Software Script 2.1 - 'key' Parameter SQL Injection
EDB-ID: 42668Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: MLM Software Script 2.1 - SQL Injection # Dork: N/A # Date: 13.09.2017 #...
View ArticleUnique Low Bid Auction Script 3.3 - SQL Injection
EDB-ID: 42667Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Unique Low Bid Auction Script 3.3 - SQL Injection # Dork: N/A # Date:...
View ArticleHotel Reservation Site Script 3.3 - 'key' Parameter SQL Injection
EDB-ID: 42669Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection # Dork: N/A # Date:...
View ArticleDoctor Appointment Script 1.3 - 'key' Parameter SQL Injection
EDB-ID: 42671Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Doctor Appointment Script 1.3 - SQL Injection # Dork: N/A # Date:...
View ArticleeBay like Auction PHP Script 2.2 - 'id' Parameter SQL Injection
EDB-ID: 42670Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection # Dork: N/A # Date:...
View ArticleMako Web Server 2.5 - Multiple Vulnerabilities
EDB-ID: 42683Author: hyp3rlinxPublished: 2017-09-13CVE: N/A Type: RemotePlatform: WindowsVulnerable App: N/A [+] Credits: John Page a.k.a hyp3rlinx [+] Website: hyp3rlinx.altervista.org [+] Source:...
View ArticleSAP Point of Sale Store Manager Hardcoded Credentials Vulnerability
SAP Point of Sale Store Manager is prone to a hard-coded credentials vulnerability. An attacker can exploit this issue to gain unauthorized access to the affected application. InformationBugtraq ID:...
View ArticleICProjectBidding 1.1 - SQL Injection
EDB-ID: 42685Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Exploit Title: Project Bidding Script 1.1 - SQL Injection # Dork: N/A # Date: 13.09.2017 #...
View ArticleInfinite Automation Mango Automation - Command Injection (Metasploit)
EDB-ID: 42698Author: James FittsPublished: 2017-09-13CVE: CVE-2015-7901 Type: RemotePlatform: JSPAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule...
View ArticleSAP Business Objects Business Intelligence Platform Cross Site Scripting...
SAP BusinessObjects Business Intelligence Platform is prone to an cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can exploit this issue...
View ArticleMicrosoft Windows .NET Framework - Remote Code Execution
EDB-ID: 42711Author: VoulnetPublished: 2017-09-13CVE: CVE-2017-8759 Type: RemotePlatform: WindowsAliases: N/ATags: N/AVulnerable App: N/A Running CVE-2017-8759 exploit sample. Flow of the exploit: Word...
View ArticleICEstate 1.1 - 'id' Parameter SQL Injection
EDB-ID: 42687Author: Ihsan SencanPublished: 2017-09-13CVE: N/A Type: WebappsPlatform: ASPXVulnerable App: N/A # Exploit Title: Real Estate Marketplace Site ASP.NET Script 1.1 - SQL Injection # Dork:...
View ArticleMotorola Netopia Netoctopus SDCS - Stack Buffer Overflow (Metasploit)
EDB-ID: 42696Author: James FittsPublished: 2017-09-13CVE: N/A Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule <...
View ArticleZScada Modbus Buffer 2.0 - Stack-Based Buffer Overflow (Metasploit)
EDB-ID: 42691Author: James FittsPublished: 2017-09-13CVE: N/A Type: RemotePlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class MetasploitModule <...
View ArticleCarel PlantVisor 2.4.4 - Directory Traversal Information Disclosure...
EDB-ID: 42706Author: James FittsPublished: 2017-09-13CVE: CVE-2011-3487 Type: WebappsPlatform: WindowsAliases: N/AAdvisory/Source: N/ATags: Metasploit FrameworkVulnerable App: N/A class...
View Article