7485 matches found
Livefyre LiveComments Plugin - Persistent Cross-Site Scripting
Title : Stored XSS in Livefyre LiveComments Plugin CVE : 2014-6420 Vendor Homepage : http://livefyre.com Software Link : http://web.livefyre.com/streamhub/liveComments Version : v3.0 Author : Brij Kishore Mishra Date : 03-Sept-2014 Tested On : Chrome 37, Ubuntu 14.04 Description : This plugin...
WordPress Theme X Arbitrary File Download Vulnerability
WordPress Theme X suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/x Demo Sites :...
Slackware 14.1 / current : mozilla-thunderbird (SSA:2014-247-03)
New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-247-03. The text itself is...
PT-2014-1975 · D Link · Dnr-326
Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...
Dogfood CRM spell.php Remote Command Execution
No description provided by source. $Id: dogfoodspellexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Joomla Component com_adds Blind SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comadds Blind SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-28 InformatioN Title : Joomla Component comadds Blind SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...
DokuWiki <= 2006-03-09b (dwpage.php) System Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- DokuWiki = 2006-03-09b release bin/dwpage.php system disclosure exploit by rgod [email protected] site: http://retrogod.altervista.org...
MailEnable IMAPD W3C Logging Buffer Overflow
No description provided by source. $Id: mailenablew3cselect.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
DokuWiki <= 2006-03-09b (dwpage.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- DokuWiki = 2006-03-09b release /bin/dwpage.php remote commands execution xploit by rgod [email protected] site:...
Bigace 2.7.5 - Remote File Upload Vulnerability
No description provided by source. ========================================== Bigace 2.7.5 Remote Upload file Vulnerability ========================================== InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link :...
Microsoft PowerPoint 2003 powerpnt.exe Unspecified Issue
No description provided by source. source: http://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these thre...
Joomla Component com_leader SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comleader SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-11 InformatioN Title : Joomla Component comleader SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Contact :...
leap cms 0.1.4 (sql/xss/su) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit
No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can...
Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities
No description provided by source. Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/ Software:...
Microsoft PowerPoint 2003 PPT File Closure Memory Corruption
No description provided by source. source: http://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these thre...
E-php CMS SQL Injection Vulnerability
No description provided by source. Exploit Title: E-php CMS SQL Injection Vulnerability Date: 22-03-2010 Author: Th3 RDX Software Link: Version: 1.0 Tested on: Demo Site category: webapp Code : -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Gr33tz to www.Teamicw.in...
my-gesuad 0.9.14 (ab/sql/xss) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...
Joomla Component com_agency SQL Injection Vulnerability
No description provided by source. Title : Joomla Component comagency SQL Injection Vulnerability Author: DevilZ TM Data : 2010-03-28 InformatioN Title : Joomla Component comagency SQL Injection Vulnerability Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email :...