Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Utopia News Pro 1.4.0 Greetz Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020 JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng All FriendS...

XML Vulnerability in JIRA

We have identified and fixed a vulnerability in JIRA that results from the way third-party XML parsers are used in JIRA. This vulnerability allows an attacker who is an authenticated JIRA user to execute denial of service attacks against the JIRA server. All versions of JIRA up to and including...

Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in All-in-One Event Calendar Plugin for WordPress, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in All-in-One Event Calendar Plugin for WordPress: CVE-2012-1835 1.1...

Dcommunication SQL Injection

Exploit Title : dcommunication Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.dcommunication.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "d...

Jhwebstudio Cross Site Scripting

Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

starCMS Cross Site Scripting

Exploit Title : starCMS Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.starcms.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "powered ...

CreateVision CMS SQL Injection

!/usr/local/bin/perl Exploit Title: CreateVision CMS Database injection. Description: Virtually none of the variables are not filtered. Google Dork: inurl:artykulprint.php Date: 2012/02/24 Author : Zwierzchowski Oskar Software Link: http://www.createvision.pl/ Version: All Version Security Risk:...

PHPFox Cross Site Scripting

Exploit Title: phpfox xss exploit Google Dork: inurl:powered by phpof Date: 25-02-2012 Author: tRipLeZiX Software Link: http://www.phpfox.com/ Version: allversion Tested on: http://www.tanaogi.com/marketplace/6/debot-was-here/ CVE : exploit xss code tHx to:...

Rocketwebco SQL Injection

Exploit Title : rocketwebco Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.rocketwebco.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "site by rocket web consulting"...

Fink Project Cross Site Scripting

Exploit Title : finkproject Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://finkproject.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

Simkom Cross Site Scripting

Exploit Title : simkom Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.simkom.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

EasyWebRealEstate blind defect and repair-vulnerability warning-the black bar safety net

Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team farbodmahini badguest. cnwww. badguest. cn WwW.H4ckCity.Org Software address: www.easywebrealestate.com Affects all version: All Version Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Example...

Dede CMS All Versions SQL Injection Vulnerability

Exploit for php platform in category web applications Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: email protected Software Website: http://www.dedecms.com...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

USN-1230-1: Quassel vulnerability

Felix Geyer discovered that the quassel-core post installation script created data and logging directories which were readable by all users. The post installation script also generated a certificate, in the data directory, which was readable by all users...

URL Shortener Script 1.0 SQL Injection

=================================================================================== url shortener script 1.0 sql injection Vulnerabilities =================================================================================== Exploit Title: url shortener script 1.0 sql injection Vulnerabilities...

Hash Code Cracker V 1.2 Released ~ Password Cracking from BreakTheSecurity

Hash Code Cracker V 1.2 Released Password Cracking from BreakTheSecurity BreakTheSecurity is proud to release the Hash Code Cracker Version 1.2. Our latest release supports Online Cracking function. Description: This password cracker is developed for PenTesters and Ethical hackers. Please Use thi...

Серьезная уязвимость во всех версиях FreeBSD

link: http://habrahabr.ru/blogs/infosecurity/129401/ Понятно что все уже вкурсе и вроде как боян уже, у меня как бы вопрос, сплоит есть уже?...

Muse Music All-In-One PLS Buffer Overflow

!/usr/bin/perl +Exploit Title: Muse Music All-In-One PLS File Buffer Overflow ExploitDEP Bypass +Date: 25\09\2011DD\MM\YYYY +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/Muse-Music-All-In-One/3000-21414-10070288.html +Version: 1.5.0.001 +Tested On: WIN-XP SP3 Brazilian Portuguese...