206 matches found
EC-CUBE vulnerable to session fixation
Overview EC-CUBE provided by LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a session fixation vulnerability CWE-384. LOCKON CO.,LTD. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and LOCKON CO.,LTD...
dancetrippin.tv XSS vulnerability
Open Bug Bounty ID: OBB-530970 Description| Value ---|--- Affected Website:| dancetrippin.tv Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...
Keybase: Universal Cross-Site Scripting in Keybase Chrome extension
Description The Keybase Chrome extension makes heavy use of the insecure innerHTML DOM API, resulting in Universal Cross-Site Scripting on all Keybase-supported social networking websites. Steps to reproduce the issue 1. Install the Keybase Chrome extension 2. Navigate to the following URL addres...
Git 版本<=2.7.1 远程代码执行漏洞
参考来源： http://seclists.org/oss-sec/2016/q1/645 Hello, original report describing the overflow is here http://pastebin.com/UX2P2jjg On 11/02/2016 16:50, Jeff King wrote this on the git security mailing list: On Thu, Feb 11, 2016 at 02:31:49PM +0100, 'Laël Cellier' via Git Security wrote: Ok the bug...
TinyShop修复不当再次注入（全版本）
简要描述： 在修复http://www.wooyun.org/bugs/wooyun-2014-068153漏洞时候，处理不当，治标不治本。 详细说明： public static function getIP if isset$SERVER"HTTPXFORWARDEDFOR"$ip = $SERVER"HTTPXFORWARDEDFOR"; elseif isset$SERVER"HTTPCLIENTIP" $ip = $SERVER"HTTPCLIENTIP"; elseif isset$SERVER"REMOTEADDR" $ip = $SERVER"REMOTEADDR";...
RedHat Update for tomcat6 RHSA-2014:0865-01
The remote host is missing an update for the Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
MyBB Extended Useradmininfo Plugin 1.2.1 - Cross Site Scripting
No description provided by source. Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site Scripting Google Dork: N/A Date: 09.02.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage: http://forum.mybboard.de/user-9022.html Software Link:...
Friends network queries QQ number of vulnerability-vulnerability warning-the black bar safety net
Brief description: By fixing the code friends network seconds check the QQ number. Detailed description: By extracting the friends network feature code, plus a string of fixed code. Both can seconds to detect each other's QQ space. That QQ number of natural to be informed. Criminals if through th...
doorGets CMS 5.2 SQL Injection
Advisory ID: HTB23197 Product: doorGets CMS Vendor: doorGets Vulnerable Versions: 5.2 and probably prior Tested Version: 5.2 Advisory Publication: January 15, 2014 without technical details Vendor Notification: January 15, 2014 Vendor Patch: January 15, 2014 Public Disclosure: February 5, 2014...
RHEL 5 : kernel (RHSA-2013:1449)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1449 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel handled t...
Resource file path traversal in WebImagesDownloadResourceManager
To reproduce: 1. Create a new page named foo any name can be used, but it must match the markup in step 3 2. In the editor, create an unmigrated-wiki-markup macro by typing "\a" don't copy/paste 3. Replace the "\a" in the macro with: code:none foo|foo|" code 4. Save the page. 5. Export to word...
StarNet interactive upload vulnerability analysis-vulnerability warning-the black bar safety net
Author:like a dog man upfileflash. asp % set upload=new uploadfile if upload. form the"act"="uploadfile" then filepath=trimupload. form"filepath" filelx=trimupload. form"filelx" i=0 for each formName in upload. File set file=upload. FileformName fileExt=lcasefile. FileExt 'get the file extension...
TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance
Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...
Mini-Stream Exploit for Windows XP SP2 and SP3
Exploit for unknown platform in category local exploits ============================================== Mini-Stream Exploit for Windows XP SP2 and SP3 ============================================== Title: Mini-Stream Exploit for Windows XP SP2 and SP3 CVE-ID: OSVDB-ID: Author: Ron Henry Published:...
Mini-stream Ripper (Windows XP SP2SP3) - Local Overflow
Mini-stream Ripper Windows XP SP2SP3 - Local Overflow !/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP...
Mandriva Update for nasm MDVA-2008:196 (nasm)
Check for the Version of nasm OpenVAS Vulnerability Test Mandriva Update for nasm MDVA-2008:196 nasm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Smarty 2.6.20 php injection
2008-10-22 числа Secunia.com была найдена уязвимость в функции expandquotedtext полный текст http://secunia.com/Advisories/32329/. Разработчики попытались исправить уязвимость как видно из их кода http://smarty-php.googlecode.com/svn/trunk/libs/SmartyCompiler.class.php путем экранированием символ...
phpBB (privmsg.php) XSS Exploit
phpBB privmsg.php XSS Exploit By: Demential Web: http://headburn.altervista.org E-mail: [email protected] PhpBB website: http://phpbb.com Exploit tested on phpBB 2.0.21 Secunia.com said: Input passed to the form field "Message body" in privmsg.php is not properly sanitised before it is returned to...
openfaq040XSS.txt
Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...
AllWeb search SQL inj. vuln.
AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...