The Latest Infosec News, Tools, and Exploits – Got Root?
# Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability get webshell # Date: 2018-06-02 # Exploit Author: xichao # Vendor Homepage: https://github.com/GreenCMS/GreenCMS # Software Link: https://github.com/GreenCMS/GreenCMS # Version: v2.3.0603 # CVE : CVE-2018-11670 An issue was discovered […]
# Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability add admin # Date: 2018-06-02 # Exploit Author: xichao # Vendor Homepage: https://github.com/GreenCMS/GreenCMS # Software Link: https://github.com/GreenCMS/GreenCMS # Version: v2.3.0603 # CVE : CVE-2018-11671 An issue was discovered […]
# Exploit Title: Smartshop 1 – Cross site request forgery # Date: 2018-06-02 # Exploit Author: L0RD or borna.nematzadeh123@gmail.com # Software Link: https://github.com/smakosh/Smartshop/archive/master.zip # Vendor Homepage: https://www.behance.net/gallery/49080415/Smartshop-Free-e-commerce-website # Version: 1 # Tested on: Kali linux […]
# Exploit Title: Facebook Clone Script 1.0.5 – Cross-Site Request Forgery # Date: 2018-05-29 # Exploit Author: L0RD # Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ # Version: 1.0.5 # Tested on: Win 10 # Description : # Facebook […]
# Exploit Title: Zechat 1.5 – ‘hashtag’ / ‘v’ SQL Injection / Cross site request forgery # Date: 2018-05-22 # Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com # Vendor Homepage: https://bylancer.com # Version: 1.5 # […]
# Exploit Title: Merge PACS 7.0 – Cross-Site Request Forgery # Google Dork: – # Date: 2018-05-21 # Exploit Author: Safak Aslan # Vendor Homepage: http://www.merge.com/ # Version: Merge PACS 7.0 # Tested on: Windows […]
# Exploit Title: Infinity Market Classified Ads Script 1.6.2 – Cross-Site Request Forgery # Date: 2018-05-18 # Exploit Author: L0RD # Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?s_rank=1520 # Version: 1.6.2 # Tested on: Kali linux # Description : […]
# Exploit Title: MyBB Admin Notes Plugin – CSRF # Date: 2018-05-14 # Author: 0xB9 # Contact: luxorforums.com/User-0xB9 or 0xB9[at]pm.me # Software Link: https://community.mybb.com/mods.php?action=view&pid=1106 # Version: 1.1 # Tested on: Ubuntu 18.04 # 1. Description: […]
<!– Details ================ Software: Metronet Tag Manager Version: 1.2.7 Homepage: https://wordpress.org/plugins/metronet-tag-manager/ Advisory report: https://advisories.dxw.com/advisories/csrf-metronet-tag-manager/ CVE: Awaiting assignment CVSS: 5.8 (Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N) Description ================ CSRF in Metronet Tag Manager allows anybody to do almost anything an […]
# Exploit Title: Online Booking system – NodAPS 4.0 – ‘search’ SQL injection / Cross-Site Request Forgery # Date: 2018-05-16 # Exploit Author: Borna nematzadeh (L0RD) # Vendor Homepage: https://codecanyon.net/item/appointment-management-system-nodaps/16197805?s_rank=1535 # Version: 4.0 # Tested […]
