webapps

CMS Touch – ‘news.php?News_ID’ SQL Injection

source: https://www.securityfocus.com/bid/67377/info

CMS Touch – ‘pages.php?Page_ID’ SQL Injection

source: https://www.securityfocus.com/bid/67377/info

TOA – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67291/info

Caldera – ‘/costview2/printers.php?tr’ SQL Injection

source: https://www.securityfocus.com/bid/67256/info

Caldera – ‘/costview2/jobs.php?tr’ SQL Injection

source: https://www.securityfocus.com/bid/67256/info

PrestaShop – ‘getSimilarManufacturer.php?id_manufacturer’ SQL Injection

source: https://www.securityfocus.com/bid/67249/info

TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 – Remote User Credential Dump

# Exploit Title: Team Helpdesk Customer Web Service (CWS) Remote User Credential Dump exploit

Seagate BlackArmor NAS – Multiple Vulnerabilities

# Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities

Crime24 Stealer Panel 1.0 – Multiple Vulnerabilities

#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Netgear DGN2200 1.0.0.29_1.7.29_HotS – Persistent Cross-Site Scripting

# Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface

Fritz!Box – Remote Command Execution

App : Fritz!Box

Beetel 450TC2 Router – Cross-Site Request Forgery (Admin Password)

​​

NULL NUKE CMS 2.2 – Multiple Vulnerabilities

NULL NUKE CMS v2.2 Multiple Vulnerabilities

TRENDnet TEW-634GRU 1.00.23 – Multiple Vulnerabilities

# Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities

WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities

------------

GeoCore MAX DB Ver. 7.3.3 – Blind SQL Injection

###########################################################################################

Adem 0.5.1 – Local File Inclusion

----------[exploit Debut]

ApPHP MicroBlog 1.0.1 – Remote Command Execution

#!/usr/bin/python

ApPHP MicroBlog 1.0.1 – Multiple Vulnerabilities

----------[exploit Debut]

Depot WiFi 1.0.0 iOS – Multiple Vulnerabilities

Document Title:

miSecureMessages 4.0.1 – Session Management / Authentication Bypass

Affected Product

Alienvault 4.3.1 – SQL Injection / Cross-Site Scripting

AlienVault 4.3.1 Unauthenticated SQL Injection

WD Arkeia Virtual Appliance 10.2.9 – Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory < 20140423-0 >

dompdf 0.6.0 – ‘dompdf.php?read’ Arbitrary File Read

Vulnerability title: Arbitrary file read in dompdf

WordPress Plugin Work-The-Flow 1.2.1 – Arbitrary File Upload

# Author: nopesled

Bonefire 0.7.1 – Reinstall Admin Account

#!/usr/bin/env python

HP Laser Jet – JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal

#!/usr/bin/perl

kitForm CRM Extension 0.43 – ‘sorter.ph?sorter_value’ SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

No-CMS 0.6.6 rev 1 – Admin Account Hijacking / Remote Code Execution via Static Encryption Key

Sixnet Sixview 2.4.1 – Web Console Directory Traversal

#Exploit Title: Sixnet sixview web console directory traversal

iDevAffiliate – ‘idevads.php’ SQL Injection

source: https://www.securityfocus.com/bid/67031/info

Teracom Modem T2-B-Gawv1.4U10Y-BI – Cross-Site Request Forgery

# Exploit Title: Teracom Modem CSRF Vulnerability

PTCeffect 4.6 – Local File Inclusion / SQL Injection

# Exploit Title: PTCeffect LFI & SQL Injection Vulnerabilities

CMSimple 4.4/4.4.2 – Remote File Inclusion

=============================================================================================================

Xerox DocuShare – SQL Injection

The following request is vulnerable to a SQL injection in the last URI segment:

Netgear WNDR3400 N600 Wireless Dual Band – Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400

eScan Web Management Console – Command Injection (Metasploit)

# This module requires Metasploit: http//metasploit.com/download

WordPress Plugin Twitget 3.3.1 – Multiple Vulnerabilities

Details

WordPress Plugin Quick Page/Post Redirect 5.0.3 – Multiple Vulnerabilities

Details

PDF Album 1.7 iOS – Local File Inclusion

Document Title:

WordPress Theme LineNity 1.20 – Local File Inclusion

[+] Local File Inclusion in WordPress Theme LineNity

Sagem Fast 3304-V2 – Authentication Bypass (1)

# Title : Sagem F@st 3304-V2 Authentication Bypass

Jigowatt PHP Event Calendar – ‘day_view.php’ SQL Injection

source: https://www.securityfocus.com/bid/66923/info

Xangati XSR / XNR – ‘gui_input_test.pl’ Remote Command Execution

source: https://www.securityfocus.com/bid/66819/info

Xangati – ‘/servlet/Installer?file’ Directory Traversal

source: https://www.securityfocus.com/bid/66817/info

Xangati – ‘/servlet/MGConfigData’ Multiple Directory Traversals

source: https://www.securityfocus.com/bid/66817/info

Microweber CMS 0.93 – Cross-Site Request Forgery

###########################################################

CubeCart 5.2.8 – Session Fixation

# Exploit Title: CubeCart 5.2.8 Session Fixation

Sendy 1.1.9.1 – SQL Injection

# Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability

Orbit Open Ad Server 1.1.0 – SQL Injection

Advisory ID: HTB23208