Showing 1 - 14 of 14

Files from Demetris Papapetrou

First Active	2011-04-08
Last Active	2013-02-21

Alt-N MDaemon WorldClient / WebAdmin Cross Site Request Forgery: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; Alt-N MDaemon version 13.0.3 WorldClient and WebAdmin applications suffer from a cross site request forgery vulnerability.; tags | exploit, csrf; SHA-256 | 7254dc66cd6fba6e9a6eb7e9d46b3ad55c8a16813b7770255f61f633561438bb; Download | Favorite | View

Alt-N MDaemon WorldClient Predictable Session ID: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; The Alt-N MDaemon version 13.0.3 WorldClient application suffers from a predictable session identifier vulnerability.; tags | exploit; SHA-256 | 92424873721cd173dc332823577d395adb3e123a0b90d2cd1514c100d2e80883; Download | Favorite | View

Alt-N MDaemon Email Body Cross Site Scripting: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; Alt-N MDaemon version 13.0.3 suffers from a cross site scripting vulnerability in the email body due to a lack of sanitization.; tags | exploit, xss; SHA-256 | 7325b220864d0b6ff380a077b29aa8c7293ee9eaa3cbb5bbf03f8dd6edefd13d; Download | Favorite | View

Alt-N MDaemon WorldClient Username Enumeration: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; The Alt-N MDaemon version 13.0.3 WorldClient application suffers from a username enumeration vulnerability based on responses provided.; tags | exploit; SHA-256 | 88ffc39eb1145981a8577ef2cd3a701922e79b7e248031243a1d54728446a564; Download | Favorite | View

Alt-N MDaemon WebAdmin Remote Code Execution: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; The Alt-N MDaemon version 13.0.3 WebAdmin application suffers from a remote code execution vulnerability via the user account import facility.; tags | exploit, remote, code execution; SHA-256 | b1e0f846c97665c28984ae715b8e4178e351676b7e1aef82d5ac59c0302500d2; Download | Favorite | View

Alt-N MDaemon WorldClient Credential Disclosure: Posted Feb 21, 2013; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; The Alt-N MDaemon version 13.0.3 WorldClient application suffers from a credential disclosure vulnerability. This is possible because the application replies to a request with a response that contains the credentials in an encoded (reversible) format.; tags | exploit, info disclosure; SHA-256 | 5e526cfd34acc8dc5cebe4e940c88c797073c12adce735bb8dc9adf90132aebf; Download | Favorite | View

Panda Internet Security Binary Planting: Posted Dec 4, 2012; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; Panda Internet Security versions 2012 and 2013 suffer from a binary planting privilege escalation vulnerability.; tags | advisory; SHA-256 | bb5e0bc6193168eed57fb6bbfba969ff0bf9390984a659efaec285d1a2979727; Download | Favorite | View

Viola DR VIO-4/1000 Directory Traversal: Posted Apr 20, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; Viola DVR VIO-4/1000 suffers from a directory traversal vulnerability.; tags | exploit, file inclusion; SHA-256 | e3b7b14e63fb2b4b4420a0ebdaf4ca813765e389b5977297108e69160e1ddb1a; Download | Favorite | View

Elxis CMS eForum 1.1 File Upload: Posted Apr 11, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; Elxis CMS eForum component version 1.1 suffers from an arbitrary file upload vulnerability.; tags | exploit, arbitrary, file upload; SHA-256 | 58b2a6b909a034aeee02869758ffbf3d70980bbfab04f276db39ed65066e18c7; Download | Favorite | View

1024cms ACP 1.1.0 Complete Modules Directory Traversal: Posted Apr 8, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; 1024cms Admin Control Panel version 1.1.0 Beta Complete-Modules package suffers from a directory traversal vulnerability.; tags | exploit, file inclusion; SHA-256 | 3be2f44cf76e5ae7fd20ecc2e29adc30229ad16974dd5ac1a6083b763d488d8e; Download | Favorite | View

1024cms ACP 1.1.0 Master-cPanel Cross Site Scripting: Posted Apr 8, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; 1024cms Admin Control Panel version 1.1.0 Beta Master-cPanel package suffers from cross site scripting vulnerabilities.; tags | exploit, vulnerability, xss; SHA-256 | ee30cc9ef6e3c2fbccfc4751f4a67c2589a0bea5b4988189e37b6e9bbbb7287d; Download | Favorite | View

1024cms ACP 1.1.0 Complete Modules Cross Site Scripting: Posted Apr 8, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; 1024cms Admin Control Panel version 1.1.0 Beta Complete-Modules package suffers from cross site scripting vulnerabilities.; tags | exploit, vulnerability, xss; SHA-256 | 8cf4b9bea8adf52595b36b697b381a16521a1d20af19ec4ee2bc7ebe2230c924; Download | Favorite | View

1024cms ACP 1.1.0 Master-cPanel Local File Inclusion: Posted Apr 8, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; 1024cms Admin Control Panel version 1.1.0 Beta Master-cPanel package suffers from a local file inclusion vulnerability.; tags | exploit, local, file inclusion; SHA-256 | 7975b0f9f1c6865f41f7054ad4a84e1a382158deff42c3fd8fde2fef9aa1a5d6; Download | Favorite | View

1024cms ACP 1.1.0 Complete Modules Local File Inclusion: Posted Apr 8, 2011; Authored by Demetris Papapetrou, QSecure | Site qsecure.com.cy; 1024cms Admin Control Panel version 1.1.0 Beta Complete-Modules package suffers from local file inclusion vulnerabilities.; tags | exploit, local, vulnerability, file inclusion; SHA-256 | fa4242a228ac0874e96bc27bc2c4b836686a7cdf15990449815adda1a30be809; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days