Tendoo CMS 1.3 - Cross-Site Scripting

Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability Google Dork: N/A Date: 28/7/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://tendoo.org/ Software Link: http://sourceforge.net/projects/tendoo-cms/ Version: 1.3 Tested on: Kali , Windows CVE : N/A Contact : [email protected]...

Tendoo CMS 1.3 Cross Site Scripting

Exploit Title: Tendoo CMS Stored And Reflected Xss Vulnerability Google Dork: N/A Date: 28/7/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://tendoo.org/ Software Link: http://sourceforge.net/projects/tendoo-cms/ Version: 1.3 Tested on: Kali , Windows CVE : N/A Contact : [email protected]...

Fiat Chrysler Automobiles Uconnect Remote Elevation of Privilege Vulnerability

Fiat Chrysler Automobiles Uconnect is a suite of in-car information systems from Fiat Chrysler Automobiles FCA in the United States. An unspecified vulnerability exists in Fiat Chrysler Automobiles Uconnect 15.26.1. A remote attacker on the same mobile network could exploit this vulnerability by...

kernel: x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS

It was found that the espfix functionality could be bypassed by installing a 16-bit RW data segment into GDT instead of LDT which espfix checks, and using that segment on the stack. A local, unprivileged user could potentially use this flaw to leak kernel stack addresses...

piquaareachamber.com Open Redirect vulnerability

Vulnerable URL: http://piquaareachamber.com/CWT/External/WCPages/WCDirectory/Directory.aspx?listingid=1191=3H4Z4R5P=uweb=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:35 GMT Vulnerability type:| Open Redirect...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto 1.4.8 - Multiple Vulnerabilities Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version: 1.4.9 Risk: Medium Vendor Contacted: 2015-05-18 Vendor Fix: 2015-07-09...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version: 1.4.9 Risk: Medium Vendor Contacted: 2015-05-18 Vendor Fix: 2015-07-09 Public Disclosure: 2015-07-10 SQL Injection...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities. Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version...

Turbomail邮件系统一处存储型xss

简要描述： Turbomail邮件系统存在几处xss存储型漏洞。 详细说明： Turbomail邮件系统存在几处xss漏洞，可以利用此漏洞获取客户邮箱cookie。 漏洞一：简单绕过附件名称过滤，实现xss，打开信件就触发。 测试代码： 构造图片附件，命名he"onerror=alertdocument.domain.jpg发送信件，打开中，为了证明普遍性，特在几个不同版本邮箱中测试截图如下： 某个版本需要转发信件时才能触发： 漏洞二：某些版本在发件人昵称处存在xss漏洞，打开信鼠标经过发件人区域时触发，此时发件人区域颜色变黄：...

Novius 5.0.1 - Multiple Vulnerabilities

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt Vendor: ======================= community.novius-os.org Product: =============================================================== novius-os.5.0.1-elche is a PHP...

ABH WORLD SQL Injection

========================================================= + Title :- ABH WORLD CMS - SQL Injection Vulnerability + Date :- 19 - June - 2015 + Vendor Homepage: :- https://abhworld.com/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google...

WordPress UserPro 2.33 Cross Site Scripting

Exploit Title: WordPress Plugin: UserPro XSS Vulnerability Google Dork: inurl:wp-content/plugins/userpro/ Date: 27 May 2015 Exploit Author: FaisaL Ahmed rEd X Author Homepage: http://faisalahmed.me/ Vendor Homepage:http://userproplugin.com/userpro Software Link:...

PT-2015-4845

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS version 6.01 Description The issue allows remote attackers to cause a denial of service, resulting in a module reload, by sending an invalid field in a Negotiate Protocol request to the SMB module...

CVE-2015-0730: Improper Input Validation

The SMB module in Cisco Wide Area Application Services WAAS 6.01 allows remote attackers to cause a denial of service module reload via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645...

WordPress Encrypted Contact Form 1.0.4 CSRF / XSS

Title: Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site Request Forgery...

How I Got Here: Jennifer Leggio

Dennis Fisher talks with Jennifer Leggio, a longtime player in security PR and marketing, about her start as an obituary writer in Southern California, her move into tech in the Bay Area, what she loves about working in security and what makes for successful startups. Download: 16leggio.mp3 Music...

Security update for the Linux Kernel (important)

The Linux kernel was updated to fix various bugs and security issues. Following security issues were fixed: - CVE-2014-8173: A NULL pointer dereference flaw was found in the way the Linux kernels madvise MADVWILLNEED functionality handled page table locking. A local, unprivileged user could have...

WordPress plugin WP Slimstat 'wp-admin/admin.php' cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the WordPress plugin WP Slimstat 'wp-admin/admin.php', which can be exploited by an attacker ...

Updated sympa packages fix CVE-2015-1306

Updated sympa packages fix security vulnerability: A vulnerability have been discovered in Sympa web interface that allows access to files on the server filesystem. This breach allows to send to a list or a user any file readable by the Sympa user, located on the server filesystem, using the Symp...

PT-2017-5801

Name of the Vulnerable Software and Affected Versions Sympa affected versions not specified Description A security issue has been found in the Sympa web interface, allowing access to files on the server filesystem. This issue enables sending any file readable by the Sympa user, located on the...