Browsing the "injection" Tag

Exploit/Advisories

NagiosXL 5.6.11 orderby SQL Injection ↭

April 9th, 2020 📆 | 3371 Views ⚑

# Title: Postauth SQL injection in NagiosXI 5.6.11 (param: orderby)# Date: 13.03.2020# Vendor: https://www.nagios.com/# Vulnerable software: https://www.nagios.com/downloads/nagios-xi/vmware/# Repo: https://github.com/c610/free/[email protected]:~$ cat

Tagged with: advisory • CSRF • exploit • injection • nagiosxl • orderby • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

Centreon 19.11 SQL Injection ↭

April 9th, 2020 📆 | 4104 Views ⚑

# Title: Postauth SQL injection in Centreon 19.11 (param: acl_res_name)# Date: 03.04.2020# Vendor: https://www.centreon.com/# Vulnerable software: https://download.centreon.com/index.php?product=19.10&action=ask&id=5074# Repo: https://github.com/c610/free/[email protected]:~$ cat

Tagged with: advisory • centreon • CSRF • exploit • injection • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

Centreon 19.10-3.el7 SQL Injection

April 9th, 2020 📆 | 3103 Views ⚑

This is a whitepaper tutorial that describes steps taken to identify post-authentication remote SQL injection vulnerabilities in Centreon version 19.10-3.el7.

Tagged with: 19103el7 • advisory • centreon • CSRF • exploit • injection • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

PlaySMS index.php Unauthenticated Template Injection Code Execution ↭

April 7th, 2020 📆 | 2752 Views ⚑

### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework## class MetasploitModule < Msf::Exploit::RemoteRank = ExcellentRankinginclude Msf::Exploit::Remote::HttpClient def initialize(info = {})super(update_info(info,‘Name’

Tagged with: advisory • code • CSRF • execution • exploit • index • indexphp • injection • overflow • playsms • scanner • security • template • unauthenticated • vulnerability • whitepaper • XSS

Pentest Tools

SQLMAP – Automatic SQL Injection Tool 1.4.4

April 3rd, 2020 📆 | 7409 Views ⚑

SQLMAP – Automatic SQL Injection Tool 1.4.4 Posted Apr 3, 2020 Authored by Bernardo Damele | Site sqlmap.sourceforge.net sqlmap is

Tagged with: advisory • automatic • CSRF • exploit • injection • overflow • scanner • security • SQL • sqlmap • tool • vulnerability • whitepaper • XSS

Exploit/Advisories

KandNconcepts Club CMS 1.1 / 1.2 Cross Site Scripting / SQL Injection ↭

April 1st, 2020 📆 | 5630 Views ⚑

# Exploit Title: KandNconcepts Club CMS 1.x SQL Injection & XSS Vulnerability# Google Dork:intext:”K & N Concepts Ltd”# Date: 2020-03-31#

Tagged with: advisory • Club • cms • cross • CSRF • exploit • injection • kandnconcepts • overflow • scanner • scripting • security • Site • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

Grandstream UCM6200 Series CTI Interface – ‘user_password’ SQL Injection

April 1st, 2020 📆 | 1794 Views ⚑

# Exploit Title: Grandstream UCM6200 Series CTI Interface - 'user_password' SQL Injection # Date: 2020-03-30 # Exploit Author: Jacob Baines

Tagged with: CTI • CVE-2020-5726 • grandstream • hardware • injection • interface • password • series • SQL • ucm6200 • userpassword • webapps

Exploit/Advisories

DLINK DWL-2600 – Authenticated Remote Command Injection (Metasploit)

April 1st, 2020 📆 | 3362 Views ⚑

## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include

Tagged with: authenticated • command • CVE-2019-20499 • dlink • DWL2600 • hardware • injection • metasploit • remote

Exploit/Advisories

Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection

April 1st, 2020 📆 | 3251 Views ⚑

# Exploit Title: Grandstream UCM6200 Series WebSocket 1.0.20.20 - 'user_password' SQL Injection # Date: 2020-03-30 # Exploit Author: Jacob Baines

Tagged with: grandstream • hardware • injection • password • series • SQL • ucm6200 • userpassword • webapps • websocket

Exploit/Advisories

SharePoint Workflows – XOML Injection (Metasploit)

March 31st, 2020 📆 | 7842 Views ⚑

# This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include

Tagged with: CVE-2020-0646 • injection • metasploit • remote • sharepoint • windows • workflows • XOML

Exploit/Advisories

Grandstream UCM6200 Series CTI Interface SQL Injection ↭

March 31st, 2020 📆 | 3663 Views ⚑

# Exploit Title: Grandstream UCM6200 Series CTI Interface – ‘user_password’ SQL Injection# Date: 2020-03-30# Exploit Author: Jacob Baines# Vendor Homepage:

Tagged with: advisory • CSRF • CTI • exploit • grandstream • injection • interface • overflow • scanner • security • series • SQL • ucm6200 • vulnerability • whitepaper • XSS

Exploit/Advisories

Grandstream UCM6200 Series WebSocket 1.0.20.20 SQL Injection ↭

March 31st, 2020 📆 | 3207 Views ⚑

# Exploit Title: Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection# Date: 2020-03-30# Exploit Author: Jacob Baines# Vendor Homepage:

Tagged with: advisory • CSRF • exploit • grandstream • injection • overflow • scanner • security • series • SQL • ucm6200 • vulnerability • websocket • whitepaper • XSS

Exploit/Advisories

DesignMasterEvents CMS 1.0 SQL Injection / Cross Site Scripting ↭

March 30th, 2020 📆 | 3507 Views ⚑

# Exploit Title: DesignMasterEvents Conference management CMS SQL Injection Auth Bypass & XSS Vulnerability# Google Dork: intext:”by :Design Master Events”#

Tagged with: advisory • cms • cross • CSRF • designmasterevents • exploit • injection • overflow • scanner • scripting • security • Site • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

Micro Focus Vibe 4.0.6 HTML Injection ↭

March 28th, 2020 📆 | 7797 Views ⚑

—–BEGIN PGP SIGNED MESSAGE—–Hash: SHA512 Advisory ID: SYSS-2019-046Product: Micro Focus Vibe (formerly Novelle Vibe)Manufacturer: Micro Focus International plcAffected Version(s): 4.0.6Tested

Tagged with: advisory • CSRF • exploit • focus • HTML • injection • micro • overflow • scanner • security • Vibe • vulnerability • whitepaper • XSS

Exploit/Advisories

DLINK DWL-2600 Authenticated Remote Command Injection ↭

March 28th, 2020 📆 | 1733 Views ⚑

### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework## class MetasploitModule < Msf::Exploit::RemoteRank = ExcellentRanking include Msf::Exploit::Remote::HttpClientinclude Msf::Exploit::CmdStager def initialize(info

Tagged with: advisory • authenticated • command • CSRF • dlink • DWL2600 • exploit • injection • overflow • remote • scanner • security • vulnerability • whitepaper • XSS

Exploit/Advisories

Webexcels Ecommerce CMS 2.x SQL Injection / Cross Site Scripting ↭

March 28th, 2020 📆 | 4904 Views ⚑

# Exploit Title: Webexcels Ecommerce CMS SQL Injection & XSS Vulnerability# Google Dork: intext:intext:” By WEB EXCELS “+inurl:”?Id=”# Date: 2020-03-27#

Tagged with: advisory • cms • cross • CSRF • ecommerce • exploit • injection • overflow • scanner • scripting • security • Site • SQL • vulnerability • webexcels • whitepaper • XSS

Exploit/Advisories

WordPress StatTraq 1.3.0 SQL Injection ↭

March 27th, 2020 📆 | 7767 Views ⚑

################################################################### # Exploit Title : WordPress StatTraq 1.3.0 SQL Injection# Author Discovered By ] : KingSkrupellos# Team : Cyberizm

Tagged with: advisory • CSRF • exploit • injection • overflow • scanner • security • SQL • stattraq • vulnerability • whitepaper • wordpress • XSS

Exploit/Advisories

Soluzione Globale Ecommerce CMS 1 SQL Injection ↭

March 27th, 2020 📆 | 4961 Views ⚑

# Exploit Title: Soluzione Globale Ecommerce cms v1 SQL Injection Vulnerability# Google Dork: intext:” Soluzione Globale s.r.l.s. ” +inurl:/.php?id=# Date:

Tagged with: advisory • cms • CSRF • ecommerce • exploit • globale • injection • overflow • scanner • security • soluzione • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

SharePoint Workflows XOML Injection ↭

March 26th, 2020 📆 | 3854 Views ⚑

# This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClientinclude Msf::Exploit::CmdStagerinclude Msf::Exploit::Powershellinclude

Tagged with: advisory • CSRF • exploit • injection • overflow • scanner • security • sharepoint • vulnerability • whitepaper • workflows • XOML • XSS

Exploit/Advisories

HP ThinPro 6.x / 7.x Privileged Command Injection ↭

March 26th, 2020 📆 | 7121 Views ⚑

HP ThinPro – Privileged command injection=============================================================================== Identifiers————————————————-* CVE-2019-18910 CVSSv3 score————————————————-7.6 (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendor————————————————-HP – https://www.hp.com](https://www.hp.com) Product————————————————-Deliver secure desktop virtualization that’s as

Tagged with: advisory • command • CSRF • exploit • injection • overflow • privileged • scanner • security • thinpro • vulnerability • whitepaper • XSS

Exploit/Advisories

HP ThinPro 6.x / 7.x Citrix Command Injection ↭

March 26th, 2020 📆 | 2920 Views ⚑

HP ThinPro – Citrix command injection=============================================================================== Identifiers————————————————-* CVE-2019-18909 CVSSv3 score————————————————-6.1 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendor————————————————-HP – https://www.hp.com](https://www.hp.com) Product————————————————-Deliver secure desktop virtualization that’s as

Tagged with: advisory • citrix • command • CSRF • exploit • injection • overflow • scanner • security • thinpro • vulnerability • whitepaper • XSS

Exploit/Advisories

SialWeb CMS eCommerce 1.0 / 1.1 Cross Site Scripting / SQL Injection ↭

March 25th, 2020 📆 | 3026 Views ⚑

# Exploit Title: SialWeb CMS SQL Injection & XSS Vulnerability# Google Dork: intext:” By Sial Web” +inurl:/.php?id=# Date: 2020-03-22# Exploit

Tagged with: advisory • cms • cross • CSRF • ecommerce • exploit • injection • overflow • scanner • scripting • security • sialweb • Site • SQL • vulnerability • whitepaper • XSS

Exploit/Advisories

UCM6202 1.0.18.13 Remote Command Injection ↭

March 24th, 2020 📆 | 8586 Views ⚑

# Exploit Title: UCM6202 1.0.18.13 – Remote Command Injection# Date: 2020-03-23# Exploit Author: Jacob Baines# Vendor: http://www.grandstream.com# Product Link: http://www.grandstream.com/products/ip-pbxs/ucm-series-ip-pbxs/product/ucm6200-series#

Tagged with: advisory • command • CSRF • exploit • injection • overflow • remote • scanner • security • ucm6202 • vulnerability • whitepaper • XSS

Exploit/Advisories

UCM6202 1.0.18.13 – Remote Command Injection

March 24th, 2020 📆 | 4124 Views ⚑

# Exploit Title: UCM6202 1.0.18.13 - Remote Command Injection # Date: 2020-03-23 # Exploit Author: Jacob Baines # Vendor: http://www.grandstream.com

Tagged with: command • CVE-2020-5722 • hardware • injection • remote • ucm6202 • webapps

12 3 ›»

April 2020
S	M	T	W	T	F	S
« Mar
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30

Browsing the "injection" Tag

Tagged with: advisory • CSRF • exploit • injection • nagiosxl • orderby • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Tagged with: advisory • centreon • CSRF • exploit • injection • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Tagged with: 19103el7 • advisory • centreon • CSRF • exploit • injection • overflow • scanner • security • SQL • vulnerability • whitepaper • XSS

Tagged with: advisory • code • CSRF • execution • exploit • index • indexphp • injection • overflow • playsms • scanner • security • template • unauthenticated • vulnerability • whitepaper • XSS

Tagged with: advisory • automatic • CSRF • exploit • injection • overflow • scanner • security • SQL • sqlmap • tool • vulnerability • whitepaper • XSS

Tagged with: advisory • Club • cms • cross • CSRF • exploit • injection • kandnconcepts • overflow • scanner • scripting • security • Site • SQL • vulnerability • whitepaper • XSS

Tagged with: CTI • CVE-2020-5726 • grandstream • hardware • injection • interface • password • series • SQL • ucm6200 • userpassword • webapps

Tagged with: authenticated • command • CVE-2019-20499 • dlink • DWL2600 • hardware • injection • metasploit • remote

Tagged with: grandstream • hardware • injection • password • series • SQL • ucm6200 • userpassword • webapps • websocket

Tagged with: CVE-2020-0646 • injection • metasploit • remote • sharepoint • windows • workflows • XOML

Tagged with: advisory • CSRF • CTI • exploit • grandstream • injection • interface • overflow • scanner • security • series • SQL • ucm6200 • vulnerability • whitepaper • XSS

Tagged with: advisory • CSRF • exploit • grandstream • injection • overflow • scanner • security • series • SQL • ucm6200 • vulnerability • websocket • whitepaper • XSS

Tagged with: advisory • cms • cross • CSRF • designmasterevents • exploit • injection • overflow • scanner • scripting • security • Site • SQL • vulnerability • whitepaper • XSS

Tagged with: advisory • CSRF • exploit • focus • HTML • injection • micro • overflow • scanner • security • Vibe • vulnerability • whitepaper • XSS

Tagged with: advisory • authenticated • command • CSRF • dlink • DWL2600 • exploit • injection • overflow • remote • scanner • security • vulnerability • whitepaper • XSS

Tagged with: advisory • cms • cross • CSRF • ecommerce • exploit • injection • overflow • scanner • scripting • security • Site • SQL • vulnerability • webexcels • whitepaper • XSS

Tagged with: advisory • CSRF • exploit • injection • overflow • scanner • security • SQL • stattraq • vulnerability • whitepaper • wordpress • XSS

Tagged with: advisory • cms • CSRF • ecommerce • exploit • globale • injection • overflow • scanner • security • soluzione • SQL • vulnerability • whitepaper • XSS

Tagged with: advisory • CSRF • exploit • injection • overflow • scanner • security • sharepoint • vulnerability • whitepaper • workflows • XOML • XSS

Tagged with: advisory • command • CSRF • exploit • injection • overflow • privileged • scanner • security • thinpro • vulnerability • whitepaper • XSS

Tagged with: advisory • citrix • command • CSRF • exploit • injection • overflow • scanner • security • thinpro • vulnerability • whitepaper • XSS

Tagged with: advisory • cms • cross • CSRF • ecommerce • exploit • injection • overflow • scanner • scripting • security • sialweb • Site • SQL • vulnerability • whitepaper • XSS

Tagged with: advisory • command • CSRF • exploit • injection • overflow • remote • scanner • security • ucm6202 • vulnerability • whitepaper • XSS

Tagged with: command • CVE-2020-5722 • hardware • injection • remote • ucm6202 • webapps

Your Account

Email Subscription

Popular

Comments

Social Media

Now Trending Topics

Tag Cloud

Categories