Community Server 2007/2008 - 'TagSelector.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49022/info Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Telligent Community Server 5.x Cross Site Scripting

Editor's note: 4 Advisories are grouped together here. ======================================================================= Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed b...

Community Server 20072008 - TagSelector.aspx Cross-Site Scripting

Community Server 20072008 - TagSelector.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49022/info Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Joomla Community SQL Injection

Exploit Title : Joomla Sql Injection Vunerability Author : Ne0 H4ck3R Contact : [email protected] Date : 03-08-2011 HomePage : www.indishell.in Dork : inurl"comcommunity" Tested on: Joomla 1.5.x Vendor : http://iluvmyplanet.com Vulnerability Style :...

Google VPs Discuss Google+ "Real Name" Rapture Fiasco

Call it the Real Name Rapture: the mass disappearance of untold numbers of Google+ users over the weekend for what many outlets reported were violations of Google’s community standards policy. Rather than getting taken up, however, it appears that Google was cracking down – on funky names,...

phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability

No description provided by source. Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts to get the vendor to fix this flaw, he has told me to...

Calling Mark Twain: Pseudonyms on G+

If you want to hide behind a fake name, don’t count on Google+ to be your “phony me” social network. As Threatpost has reported, the new social network doesn’t truck with fake identities – a position that’s quite similar to the one taken by Facebook. The company has also taken a hard stand on...

Fedora Update for drupal7 FEDORA-2011-8879

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2011-8879 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

AntiSecShell v.0.5 Shell Released by underground hackers of Antisec

AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...

Security Metrics Go Prime Time at Metricon 6

The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...

Tagonet Portal SQL Injection

Exploit Title:Tagonet Portal SQL Injection Vulnerability + Author: Net.Edit0r + Saftware : http://www.tagonet.co.il/ + Date : 2011.06.28 + Test on : Windowss XP SP3 + Category : webapps Exploit Dork : Powered by Tagonet Exploit : http://www.Target.com/news.asp?id=551 having 1=1-- Demo :...

2Point Solutions - 'cmspages.php' SQL Injection

============================================= 2Point Solutions SQL Injection Vulnerability ============================================= + Exploit Title : 2Point Solutions cmspages.php SQL Injection Vulnerability + Author : NewbieCampuz + Published: 2011-06-24 : 02.54 WIB + Test On : Windows XP S...

Joomla A Cool Debate 1.0.3 Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...

Barr Unbowed: Former HBGary Federal CEO says We Need to Learn from LulzSec

This is the first in a two-part interview with Aaron Barr, the former CEO of HBGary Federal Each of us has made mistakes in our lives – woeful errors that we’ve been forced to learn from at great personal cost. Blessedly, those painful experiences are typically private affairs. Tears are spilled...

Metasploit Launches Reward Program For Exploits

The team behind the Metasploit Project is launching its own version of a bug bounty program: cash payouts for working exploits. The group is hoping to get explit code for as many of its top 30 vulnerabilities as possible before the program expires later this summer. Metasploit has put together a...

Nmap NSE net: snmp-netstat

Attempts to query SNMP for a netstat like output. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpnetstatnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper...

Nmap NSE net: snmp-brute

Attempts to find an SNMP community string by brute force guessing. SYNTAX: snmplist: The filename of a list of community strings to try. snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: snmp-processes

Attempts to enumerate running processes through SNMP. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpprocessesnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrappe...

eFront Community++ <= XSRF (Add admin/change admin passwd)

Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...