OSTP Announces New Cybersecurity R&D Plan

The Office of Science and Technology Policy OSTP released a new report yesterday that details plans to complement the nation’s existing cybersecurity policy, according to a blog entry on the office’s site co-authored by U.S. Chief Technology Officer Aneesh Chopra and Cybersecurity Coordinator...

Cain & Abel v4.9.43 Released

Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...

Cain & Abel v4.9.43 Released

Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...

Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress flash-album-gallery plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team http://irist.ir/forum/ Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities Download......:...

Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress 1-jquery-photo-gallery-slideshow-flash plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team http://irist.ir/forum/ Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities...

Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress skysa-official plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team http://irist.ir/forum/ Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities Download......:...

Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities

No description provided by source. Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/meenews/ Exploit.......: http://www.site.com/path/wp-content/plugins/meenews/newsletter.php?idnews=xss Google Search.: "Powered by Wordpress" Bu...

Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress alert-before-your-post Plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities Download......:...

Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress meenews 5.1 plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities Download......:...

WordPress Advanced Text Widget Cross Site Scripting

Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress advanced-text-widget Plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/advanced-text-widget/ Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.ir Exploit..........

wordpress Flexible Custom Post Type plugin Xss Vulnerabilities

a bug in wordpress Flexible Custom Post Type plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team Www.IrIsT.Ir wordpress Flexible Custom Post Type plugin Xss Vulnerabilities Download......:...

CVE-2010-4971

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

CVE-2010-4971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

This module exploits a stack based buffer overflow found in Cytel Studio use exploit/windows/fileformat/cytel/studiocy3 msf undefinedstudiocy3 show actions ...actions... msf undefinedstudiocy3 set ACTION msf undefinedstudiocy3 show options ...show and set options... msf undefinedstudiocy3 run Thi...

LifeSize Room Vulnerabilities

Discovered: 07-13-11 By: Spencer McIntyre zeroSteiner SecureState R&D Team www.securestate.com Background: ----------- Multiple vulnerabilities within the LifeSize Room appliance. Vulnerability Summaries: ------------------------ Login page can be bypassed, granting administrative access to the w...

LifeSize Room Command Injection

Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'LifeSize Room Command Injection', 'Description' = %q This module exploits a vulnerable resource in LifeSize Room versions 3.5.3 and 4.7.18 to inject OS commmands. LifeSize Room is an appliance and thus the...

Musicbox 3.7 Cross Site Scripting / SQL Injection

============================================================ MusicBox alertdocument.cookie&action=search&start=0...

IDEAL Administration 2011 11.4 - Local Buffer Overflow (SEH)

IDEAL Administration 2011 11.4 - Local Buffer Overflow SEH !/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, anothe...

Cross site scripting

Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...

CVE-2011-0050: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the nonjs interface interfaces/nonjs.pm in CGI:IRC before 0.5.10 allows remote attackers to inject arbitrary web script or HTML via the R parameter...