The Latest Infosec News, Tools, and Exploits – Got Root?
# Exploit Title: Facebook Clone Script 1.0.5 – ‘search’ SQL Injection # Date: 2018-05-29 # Exploit Author: L0RD # Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ # Version: 1.0.5 # Tested on: Win 10 # POC : SQLi : […]
# Exploit Title: Facebook Clone Script 1.0.5 – Cross-Site Request Forgery # Date: 2018-05-29 # Exploit Author: L0RD # Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ # Version: 1.0.5 # Tested on: Win 10 # Description : # Facebook […]
# Exploit: CloudMe Sync < 1.11.0 – Buffer Overflow (SEH) (DEP Bypass) # Date: 2018-05-27 # Author: Juan Prescotto # Tested Against: Win7 Pro SP1 64 bit # Software Download: https://www.cloudme.com/downloads/CloudMe_1109.exe # Tested Against Version: […]
# Exploit Title: Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution # Google Dork: N/A # Date: 27/05/2018 # Exploit Author: Corrado Liotta # Vendor Homepage: https://www.bitmain.com/ # Software Link: N/A # […]
# Exploit Title: Honeywell XL Web Controller – Cross-Site Scripting # Date: 2018-05-24 # Exploit Author: t4rkd3vilz # Vendor Homepage: https://www.honeywell.com # Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB # 104 […]
# Exploit Title: WordPress Plugin Peugeot Music – Arbitrary File Upload # Google Dork: inurl:/wp-content/plugins/peugeot-music-plugin/ # Date: 2018-05-23 # Exploit Author: Mr.7z # Vendor Homepage: – # Software Link: – # Version: 1.0 # Tested […]
# Exploit Title: Easy File Uploader 1.7 – SQL Injection / Cross-Site Scripting # Dork: N/A # Date: 22.05.2018 # Exploit Author: Özkan Mustafa Akkuş (AkkuS) # Vendor Homepage: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 # Version: 1.4 / fourth […]
# Exploit Title: Zechat 1.5 – ‘hashtag’ / ‘v’ SQL Injection / Cross site request forgery # Date: 2018-05-22 # Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com # Vendor Homepage: https://bylancer.com # Version: 1.5 # […]
# Exploit Title: PaulPrinting CMS Printing 1.0 – SQL Injection # Exploit Date: 2018-05-19 # Software Link: https://codecanyon.net/item/paulprinting-cms-printing-solutions/19546365 # Author: Mehmet Onder Key # Version: 1.0 # Tested On: Linux # 1. Description # Any […]
# Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server – SQL Injection # Date: 21-05-2018 # Exploit Author: t4rkd3vilz # Vendor Homepage: http://www.nordex-online.com # Tested on: Windows # Version: N149/4.0-4.5 Wind Turbine # Category: webapps […]
