217 matches found
Hidden in the Share button in the attack: Blogger. com exposure of high-risk CSRF（cross-site request forgery）vulnerability-vulnerability warning-the black bar safety net
The Egyptian security expert Mazen shows Gamal Mesbah on Blogger. com found a high risk of CSRF（cross-site request forgery）vulnerabilities. The vulnerability can allow an attacker in blogger without the knowledge of writing and publishing blogs, while the private blog public. Blogger is Google's...
CVE-2014-7661
The Masquito Blogger aka com.wmasquito application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Masquito Blogger aka com.wmasquito application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7661
CVE-2014-7661 affects the Masquito Blogger app (com.wmasquito) for Android (version 0.1). The root cause is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...
CVE-2014-7661
The Masquito Blogger aka com.wmasquito application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Particle Blogger <= 1.2.0 (post.php postid) Remote SQL Injection Exploit
No description provided by source. !-- Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-16 Product / Vendor : Particle Soft http://blogger.particlesoft.net/ Bug : http://localhost/script/post.php?postid=-SQL Inj- Particle Blogge...
NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger = v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NewLife...
Particle Blogger <= 1.2.1 Archives.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Comdev Web Blogger <= 4.1.3 (arcmonth) SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql Injection...
Nilson's Blogger 0.11 'comments.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27559/info Nilson's Blogger is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include...
Wiko Mobiles Can be Remotely Crashed with a Text Message
A vulnerability has been identified in Wiko Mobiles that could allow anyone to remotely force it to shut down abruptly with a text message only. Wiko is a two-year-old French Mobile manufacturing company known for its cheapest mobiles and smartphones. French blogger Korben reported that just by...
Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability
Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...
Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability
Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...
Beware of Fraudulent Sites, phishing for Twitter accounts
There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...
Tumblr Repairs Defacements After Worm Hits Thousands of Accounts
A malware attack against the Tumblr blogging platform has been stifled, but not before tens of thousands of pages were defaced with a racist taunt by a group of Internet trolls known as GNAA. A post on the Tumblr staff blog yesterday said engineers had identified the source of the problem, remove...
Megabirlik Bilgi Islem Cross Site Scripting
---------------------------------------------------------------- Megabirlik Bilgi Islem Cross Site Scripting ---------------------------------------------------------------- Exploit Title : Megabirlik Bilgi Islem alert/0/ Greets To : | Amir | B3HZ4D | Packetstormsecurity.org | Exploit-db.com | |...
Blogger CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Blogger CSRF Vulnerability Author: DaOne @LibyanCA Site: http://www.blogger.com CSRF Change Profile Information input typ...
CVE-2012-2381
Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the blogger role...
Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher
An Iranian man who revealed a vulnerability in a widely used point of sale POS system in Iran had his blog confiscated by Google, which cited violations of its Terms of Service. A Google spokesman acknowledged that the company pulled down the Blogger site that Khosrow Zarefarid, an Iranian IT...