MyCustomers CMS 1.3.873 - SQL Injection

Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28 Version : 1.3 Vulnerable Paramter DPT= Demo:...

MyCustomers 1.3.873 SQL Injection

Exploit Title : MyCustomers Cms Sql Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.iran-php.com/ Google Dork : "Powered By IranPHP" & inurl:/index.php?DPT=IP17 & "Powered+by+MyCustomers-1.3.873" Date: 2015/11/28 Version : 1.3 Vulnerable Paramter DPT= Demo:...

youtube-trends.blogspot.co.nz XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.co.nz/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.be XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.be/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.fr XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.fr/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.mx XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.mx/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.com.tr XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.com.tr/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.com.uy XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.com.uy/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

youtube-trends.blogspot.com.ng XSS vulnerability

Vulnerable URL: http://youtube-trends.blogspot.com.ng/search?q=%3C/script%3E%3Cscript%3Ealert%28%27+XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.05.2016 Latest check for patch:| 17.05.2016 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2015-6535: Stored XSS in YouTube Embed (WordPress plugin) allows admins to compromise super admins

Details ================ Software: YouTube Embed Version: 3.3.2 Homepage: https://wordpress.org/plugins/youtube-embed/ CVE ID: CVE-2015-6535 Pending CWE ID: CWE-79 CVSS: 5.5 Medium; AV:N/AC:L/Au:S/C:P/I:P/A:N Description ================ A stored XSS vulnerability in YouTube Embed 3.3.2 and...

This Guy Builds A Thor-Like Hammer that Only He Can Pick Up

If you have watched the most recent Avengers movie, then you would be aware of a scene where all the superheroes Iron Man, War Machine, Hawkeye, and Captain America take turns to lift Thor’s hammer but fail. Someone has an explanation, Why? Inspired by Thor's legendary hammer Mjolnir that is not...

FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow

Document Title: =============== FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1613 Release Date: ============= 2015-10-06 Vulnerability Laboratory ID VL-ID: ==================================== 1613...

FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow

Document Title: =============== FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1613 Release Date: ============= 2015-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 1613...

When a 'Hacker News' Reader Tricked Me into visiting this Amazing Site (Don't Click at Work)

My usual bed routine is to check comments under my articles before I go to sleep. The same I was doing last night, but something weird happened to me. Someone posted a mysterious short link without any text below one of my articles on our official 'The Hacker News' Facebook Page, and with the...

WordPress YouTube Embed Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A cross-site scripting vulnerability exists in the includes/options-profiles.php script in WordPress YouTube Embed plugin versions prior to 3.3.3. The vulnerability can be exploited by ...

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

CVE-2015-6535

This CVE concerns WordPress YouTube Embed plugin (software: YouTube Embed; version 3.3.2, potentially earlier) with a stored XSS in includes/options-profiles.php. The vulnerability arises from unsanitized input in the Profile name field (youtube_embed_name parameter), allowing an admin user to in...

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...