HP iMC Plat 7.2 - Remote Code Execution
EDB-ID: 43195Author: Chris LynePublished: 2017-11-28CVE: CVE-2017-5817 Type: RemotePlatform: WindowsVulnerable App: N/A # Exploit Title: HP iMC Plat 7.2 dbman Opcode 10007 Command Injection RCE # Date:...
View ArticleHP iMC Plat 7.2 - Remote Code Execution (2)
EDB-ID: 43198Author: Chris LynePublished: 2017-11-29CVE: CVE-2017-5816 Type: RemotePlatform: WindowsVulnerable App: N/A # Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE # Date:...
View ArticleJobs2Careers / Coroflot Clone - SQL Injection
EDB-ID: 43203Author: 8bitsecPublished: 2017-11-30CVE: N/A Type: WebappsPlatform: PHPVulnerable App: N/A # Date: 2017-11-30 # Exploit Author: 8bitsec # Vendor Homepage: http://www.i-netsolution.com/ #...
View ArticleMistServer 2.12 - Cross-Site Scripting
EDB-ID: 43205Author: hyp3rlinxPublished: 2017-12-01CVE: CVE-2017-16884 Type: WebappsPlatform: MultipleVulnerable App: N/A [+] Website: hyp3rlinx.altervista.org [+] Source:...
View ArticleArtica Web Proxy 3.06 - Remote Code Execution
EDB-ID: 43206Author: hyp3rlinxPublished: 2017-12-01CVE: CVE-2017-17055 Type: WebappsPlatform: PHPVulnerable App: N/A [+] Website: hyp3rlinx.altervista.org [+] Source:...
View ArticleAbyss Web Server < 2.11.6 - Heap Memory Corruption
EDB-ID: 43207Author: hyp3rlinxPublished: 2017-12-01CVE: N/A Type: DosPlatform: WindowsVulnerable App: N/A [+] Website: hyp3rlinx.altervista.org [+] Source:...
View ArticleCisco NX-OS System Software CVE-2017-12330 Local Command Injection Vulnerability
Cisco NX-OS System Software is prone to a local command-injection vulnerability. A local attacker can exploit this issue to execute arbitrary commands with user's privileges. This issue being tracked...
View ArticleCisco UCS Central Software Cross Site Scripting and Session Fixation...
Cisco UCS Central Software is prone to a cross-site scripting vulnerability and a session-fixation vulnerability. An attacker may leverage these issues to hijack an arbitrary session and gain...
View ArticleDrupal Automated Logout Module HTML Injection Vulnerability
The Automated Logout module for Drupal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.An attacker may leverage this issue to execute arbitrary...
View Articleaws-cfn-bootstrap Local Code Execution
aws-cfn-bootstrap versions prior to 1.4-22.14 suffer from a local code execution vulnerability.MD5 | 959ceb0942bc38ddb3afd790bfa315c3Downloadaws-cfn-bootstrap local code execution as...
View ArticleCEMLink 6 Unrestricted WSDL Service Access / Poor Crypto Implementation
CEMLink 6 suffers from having unrestricted WSDL service access and a weak mechanism for password storage.MD5 | 52fe0bdeec2533e61add0b221c0b0bacDownload# # # # # # # # # # # # # # # # # # # # # # # # #...
View ArticleAxis Communications MPQT/PACS Heap Overflow / Information Leakage
Axis Communications MPQT/PACS suffers from heap overflow and information leakage vulnerabilities.MD5 | 72d64636f194ac1df24d324e64fb3200Download[STX]Subject: Axis Communications MPQT/PACS Heap Overflow...
View ArticleSocuSoft Co. Photo 2 Video Converter 8.0.0 Code Execution / DoS
SocuSoft Co. Photo 2 Video Converter Free and Pro variants version 8.0.0 suffer from a buffer overflow in the pdmlog.dll library.MD5 |...
View ArticleMistServer 2.12 Cross Site Scripting
MistServer version 2.12 suffers from a persistent cross site scripting vulnerability.MD5 | 7b7d57cb59056ac8a438058f6d3380cfDownload[+] Credits: John Page (aka Hyp3rlinX) [+] Website:...
View ArticleArtica Web Proxy 3.06.112216 Remote Code Execution
Artica Web Proxy version 3.06.112216 suffers from a remote code execution vulnerability.MD5 | 90c89dcf50c8e44aab718305bfd8452fDownload[+] Credits: John Page (aka Hyp3rlinX) [+] Website:...
View ArticleAbyss Web Server Memory Heap Corruption
Abyss Web Server versions prior to 2.11.6 suffer from a memory heap corruption vulnerability.MD5 | 6953589da496e3632818801ecf910fe5Download[+] Credits: John Page (aka HyP3rlinX) [+] Website:...
View ArticleWinduCMS 3.1 Local File Disclosure
WinduCMS versions 3.1 and below suffer from a local file disclosure vulnerability.MD5 | 844f1243f111209eb9021ad59ea37669Download#!/usr/bin/python## Exploit Title: WinduCMS <= 3.1 - Local File...
View ArticleJobs2Careers / Coroflot Clone SQL Injection
Jobs2Careers / Coroflot Clone suffer from a remote SQL injection vulnerability.MD5 | 89c18bd7067c0b5f7e78b774adc42b16Download# Exploit Title: Jobs2Careers / Coroflot Clone - SQL Injection# Date:...
View ArticleHP iMC Plat 7.2 Remote Code Execution
HP iMC Plat version 7.2 suffers from a remote code execution vulnerability.MD5 | 8baebfa60a6f51e59e3521de21d45b0aDownload#!/opt/local/bin/python2.7# Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008...
View ArticleFortiGate SSL VPN Portal 5.x Cross Site Scripting
FortiGate SSL VPN Portal versions 5.6.2 and below, 5.4.6 and below, 5.2.12 and below, and 5.0 and below suffer from a cross site scripting vulnerability.MD5 |...
View Article