2017 August

This Metasploit module exploits a vulnerability in the handling of Windows Shortcut files (.LNK) that contain a dynamic icon, loaded from a malicious DLL. This vulnerability is a variant of MS15-020 (CVE-2015-0096). The created LNK file is similar except in an additional SpecialFolderDataBlock is included. The folder ID set in this SpecialFolderDataBlock is set to […]

VehicleWorkshop Arbitrary File Upload

Posted by deepcore under exploit (No Respond)

VehicleWorkshop suffers from a remote file upload vulnerability.

SOL.Connect ISET-mpp Meter 1.2.4.2 SQL Injection

Posted by deepcore under exploit (No Respond)

SOL.Connect ISET-mpp meter version 1.2.4.2 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

:: Deepquest ::

This site contains information which could be considered illegal in some countries. It is provided here for educational use only and is not intended to be used for illegal activities.

http://wiangpapao.chiangrai.doae.go.th/newweb/Intruder.txt

http://wiangchiangrung.chiangrai.doae.go.th/newweb/Intruder.txt

http://wiangchai.chiangrai.doae.go.th/newweb/Romantic.txt

http://mueang.chiangrai.doae.go.th/newweb/Intruder.txt

http://khuntan.chiangrai.doae.go.th/newweb/Intruder.txt

http://chiangkhong.chiangrai.doae.go.th/newweb/Romantic.txt

VehicleWorkshop Authentication Bypass / SQL Injection

Microsoft Windows LNK Shortcut File Code Execution

VehicleWorkshop Arbitrary File Upload

SOL.Connect ISET-mpp Meter 1.2.4.2 SQL Injection

Tabs Switcher

Categories

Archives

Meta

BLOGROLL