-
**CSRF (Admin Password Change)**
Cross-site request forgery protection is not available on sensitive forms. In the following example is possible to change the admin password:
```
history.pushStat…
ghost updated
7 years ago
-
edit: "gem install bundler" fixed this... i dont know why i had to do this as i never had to before with other kali installs however its now working tis can be closed... thanks
fully updated kali rol…
-
# Exploit Title: GravCMS Core (Admin Plugin) v1.4.2 - Persistent Cross-Site Scripting
# Date: 2017-06-07
# Exploit Author: Ahsan Tahir
# Vendor Homepage: https://getgrav.org/
# Software Link: http…
-
Product: INTER-Mediator
Download: https://github.com/INTER-Mediator/INTER-Mediator
Vunlerable Version: 5.5 and probably prior
Tested Version: 5.5
Author: ADLab of Venustech
Advisory Details:
M…
-
Product: Twitter-Like-System-PHP
Download: https://github.com/iSimar/Twitter-Like-System-PHP
Vunlerable Version: latest version
Tested Version: latest version
Author: ADLab of Venustech
Advisor…
-
Product: YouTube-Downloader
Download: https://github.com/jeckman/YouTube-Downloader
Vunlerable Version: latest version
Tested Version: latest version
Author: ADLab of Venustech
Advisory Details…
-
Product: Gazelle
Download: https://github.com/WhatCD/Gazelle
Vunlerable Version: latest version
Tested Version: latest version
Author: ADLab of Venustech
Advisory Details:
A Cross-Site Scripti…
-
Product: Gazelle
Download: https://github.com/WhatCD/Gazelle
Vunlerable Version: latest version
Tested Version: latest version
Author: ADLab of Venustech
Advisory Details:
A Cross-Site Scripti…
-
Product: Sentrifugo
Download: https://github.com/sapplica/sentrifugo
Vunlerable Version: 3.1.1 and probably prior
Tested Version: 3.1.1
Author: ADLab of Venustech
Advisory Details:
Multiple C…
-
Product: Varying Vagrant Vagrants Dashboard
Download: https://github.com/topdown/VVV-Dashboard
Vunlerable Version: 0.2.0 and probably prior
Tested Version: 0.2.0
Author: ADLab of Venustech
Advi…