WordPress Crontrol Plugin <= 1.2.3 - Cross Site Scripting (XSS)

Because of this vulnerability, authenticated administrators can store HTML and JS code. Vulnerable parameters: "idhookname", "idsig", "idnextrun", "idargscode". Solution Update the plugin...

CollabNet Subversion Edge indes local file inclusion

Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via logfile "listViewItem" parameter of the "index" action Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type:...

WordPress WP Fast Cache Plugin <= 1.4 - Multiple Vulnerabilities

This plugin is prone to cross site request forgery attacks, which can also be combined with XSS attacks authenticated administrators only. Solution Update the plugin...

Shopify: [persistent cross-site scripting] customers can target admins

hello, Let's say a shop has a checkout button. when we click buy now , you will be redirected to https://madamcury.myshopify.com/cart/1188733065:1?channel=buybutton&referer=javascript:alertdocument.cookie; Keep an eye on referer parameter in URL referer=javascript:alertdocument.cookie; A customer...

Http debug commands in FortiMail exposes users credentials to admins

...

CVE-2015-0985

The CVE-2015-0985 entry concerns the XZERES 442SR Wind Turbine OS. The vulnerability is a Cross-Site Request Forgery (CSRF) in the 442SR Web interface that can allow an attacker to hijack an admin’s session and perform actions such as changing the default admin password via a crafted GET request....

Websense TRITON V-Series appliances Arbitrary File Read Information Disclosure Vulnerability

Websense TRITON is the Unified Content Architecture for data security. A security vulnerability in versions prior to Websense TRITON V-Series appliances 7.8.3 hotfix 03 and 7.8.4 hotfix 01 allows remote administrators to read arbitrary files and password information...

Mobile Android, iOS Apps Still Vulnerable to FREAK Attacks

In the shadow of a major OpenSSL vulnerability scheduled to be announced tomorrow, lingering issues remain with mobile platforms and applications that still run versions of the crypto library vulnerable to FREAK attacks. A report published Tuesday by FireEye paints a bleak picture of vulnerable...

SolarWinds Orion Service - SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...

CVE-2015-0580

Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System ACS before 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027...

Ghost glibc Vulnerability Affects Enterprise Applications

What drove IT admins crazy about the Bash vulnerability was that it was difficult to determine—and patch—everything that was making a Bash call. It was everywhere. Apparently, some of that angst applies to the Ghost vulnerability in the GNU C library, known as glibc. At first, experts believed th...

CVE-2014-9193

Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting...

X (Formerly Twitter): Homograph attack.

In the report 31193 cmiller said "Twitter does warn if the user tries to visit a malicious URL while passing through our t.co URL shortening service. Thanks!" URL redirection warning not given for punny code URL. ATTACK: I mainly envision using this as an attack against admins of programs that us...

WHMCS 5.2.7 - SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python 2013/10/03 - WHMCS 5.2.7 SQL Injection http://localhost.re/p/whmcs-527-vulnerability url = 'http://clients.target.com/' wopsie dopsie useremail = '[email protected]' just create a dummie account at /register.php userpwd = 'hacker' impor...

forkcms 3.2.5 - Multiple Vulnerabilities

ForkCMS 3.2.5以及更低版本存在CSRF和XSS反射型漏洞。IMB X-Force确认3.2.6版本也存在CSRF漏洞。 1.CSRF ForkCMS 3.2.5存在CSRF漏洞，攻击者可删除admins/users用户，删除网页，并且当授权的admin用户访问包含以下html/javascript代码的网页时可提权： 1.1删除Admins或Users用户 CSRF Exploit to delete ADMIN/USER account 注意第一个能删除的ID是2而不是1。因为1是安装阶段创建的超级管理员，称为"Fork CMS"（ForkCMS 定义了...

JBI CMS SQL Injection Vulnerability

No description provided by source. In The Name Of GOD + Exploit Title: JBI CMS SQL Injection Vulnerability + Date: 2010-11-04 + Author : Cru3l.b0y + Software Link: http://www.jamesblakeinternet.com/london/cms + Tested on: Ubuntu 10.10 + Contact : [email protected] + Website : WwW.PenTesters.IR ...

JPortal 2.3.1 Banner.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13103/info JPortal is reportedly affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

LifeType 1.2.10 HTTP Referer stored XSS

No description provided by source. Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results in a cross site...

Viennabux Beta! 'cat' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39602/info Viennabux Beta! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Sql injection

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...