SourceBans 1.4.7 Cross Site Scripting

Exploit Title: SourceBans Version 1.4.7 XSS Google Dork: inurl:"sourcebans/index.php?p=submit" Date: Feb. 9th 2011 Author: Sw1tCh Software Link: http://www.sourcebans.net/ Version: 1.4.7 Info: SourceBans is an application for managing publicly the banned users for a Steam Server. -= The Advisory ...

Cisco WebEx .atp and .wrf Overflow Vulnerabilities

Core Security Technologies - Corelabs Advisory Cisco WebEx .atp and .wrf Overflow Vulnerabilities 1. Advisory Information Title: Cisco WebEx .atp and .wrf Overflow Vulnerabilities Advisory ID: CORE-2010-1001 Advisory URL:...

Report : A global shift in cybercrime !!

The target of attacks has shifted from traditional infrastructure to mobile users and endpoint devices, according to a new report. Research from SpiderLabs found that malicious tools became more customized, automated and persistent in 2010. This trend combined with the popularity of mobile device...

PhpMyAdmin client side 0Day redirect link code injection-vulnerability warning-the black bar safety net

PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele "emgent" Historical [email protected] Marco "whitesheep" Rondini [email protected] Alessandro "scox" Scoscia [email protected] In error.php, PhpMyAdmin permit to insert text and...

PhpMyAdmin Client Side 0Day Code Injection and Link Falsification

Exploit for php platform in category web applications ================================================================= PhpMyAdmin Client Side 0Day Code Injection and Link Falsification ================================================================= Credits: Emanuele 'emgent' Gentili Marco...

phpMyAdmin Client Side Code Injection

PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag, like BBCode. With tag a@url@pageClick Me/a, you can insert your own...

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag,...

phpMyAdmin - Client-Side Code Injection / Redirect Link Falsification

PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag, like BBCode. With tag a@url@pageClick Me/a, you can insert your own...

MDVA-2010:227 : libalsa2

This is a bugfix and maintenance update bundle that addresses various issues in a number of packages. Some thread-related problems were found in the libalsa2 library that could cause segmentation faults in some audio applications one example being phonon when used with gstreamer output and...

Vtiger CRM <= 5.2.0 Multiple Vulnerabilities - Active Check

Vtiger CRM is prone to an arbitrary file upload vulnerability, multiple local file include LFI vulnerabilities, and multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

Social-Engineer Toolkit v1.0 - Latest Version Download

The Social Engineer Toolkit SET has been updated to version 1.0! We wrote about the Social Engineer's Toolkit in our old post here. This release is called the Devolution Release. "The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the hum...

XAMPP Cross Site Scripting and Information Disclosure Vulnerabilities

XAMPP is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to obtain sensitive information, steal cookie-based authentication information...

Douran Portal 3.9.7.55 - Arbitrary File Upload / Cross-Site Scripting

source: https://www.securityfocus.com/bid/44594/info Douran Portal is prone to an arbitrary-file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to upload and execute...

Oracle Sun Java System Web Server - HTTP Response Splitting

Oracle Sun Java System Web Server - HTTP Response Splitting Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied inpu...

Authorization

The CCAgent option 9.0.8.4 and earlier in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which...

Easily Exploitable Bugs Becoming a Precious Commodity

There has never been more focus on security than there is right now, whether it’s from software vendors looking to eliminate flaws in their products, from attackers looking to exploit those flaws or from customers who are sick of having their PCs compromised. And as the focus has intensified in...

Apple QuickTime - _Marshaled_pUnk Backdoor Client-Side Arbitrary Code Execution

Apple QuickTime - MarshaledpUnk Backdoor Client-Side Arbitrary Code Execution Original Source: http://reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versio...

Apple QuickTime - '_Marshaled_pUnk' Backdoor Client-Side Arbitrary Code Execution

Original Source: http://reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into visiting, by any mean, a specially...

Jira Cross Site Scripting and Information Disclosure Vulnerabilities

Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Jira 4.0.1 - Cross-Site Scripting Information Disclosure

Jira 4.0.1 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/42025/info Jira is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input...