10380 matches found
WordPress MM Forms Community plugin <= 1.2.3 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...
[SECURITY] Fedora 16 Update: drupal7-7.6-1.fc16
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
WordPress MM Forms Community File Upload
. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...
Rethinking Black Hat: Building, Rather Than Breaking, Security
No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...
Community Server 'TagSelector.aspx' Cross Site Scripting Vulnerability
Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
Community Server <= 2008 XSS Vulnerability - Active Check
Community Server is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Call for DEFCON Chennai (DC602028) 2011 meet on 14th August
Call for DEFCON Chennai DC602028 2011 meet on 14th August Welcome to DC602028 aka DEF-CON Chennai DEFCON Chennai DC602028 inviting all the like minded heads for the August 2011 meet In Chennai. Get Ready for Next Generation DefCon Meet.. -Where it 's taking place? Dazzle restaurant, Neelankarai...
Community Server - Stored Cross-Site Scripting in User's Signature
Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed by Telligent. It uses ASP.NET platform C and Microsoft SQL Server database. From it's 5.0 version, the software was renamed to...
Telligent Community Server 5.x Cross Site Scripting
Editor's note: 4 Advisories are grouped together here. ======================================================================= Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed b...
Community Server 2007/2008 - 'TagSelector.aspx' Cross-Site Scripting
source: https://www.securityfocus.com/bid/49022/info Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Community Server 20072008 - TagSelector.aspx Cross-Site Scripting
Community Server 20072008 - TagSelector.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49022/info Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities
Wiccle Web Builder and iWiccle CMS Community Builder are prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Joomla Community SQL Injection
Exploit Title : Joomla Sql Injection Vunerability Author : Ne0 H4ck3R Contact : [email protected] Date : 03-08-2011 HomePage : www.indishell.in Dork : inurl"comcommunity" Tested on: Joomla 1.5.x Vendor : http://iluvmyplanet.com Vulnerability Style :...
Google VPs Discuss Google+ "Real Name" Rapture Fiasco
Call it the Real Name Rapture: the mass disappearance of untold numbers of Google+ users over the weekend for what many outlets reported were violations of Google’s community standards policy. Rather than getting taken up, however, it appears that Google was cracking down – on funky names,...
phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
No description provided by source. Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts to get the vendor to fix this flaw, he has told me to...
Calling Mark Twain: Pseudonyms on G+
If you want to hide behind a fake name, don’t count on Google+ to be your “phony me” social network. As Threatpost has reported, the new social network doesn’t truck with fake identities – a position that’s quite similar to the one taken by Facebook. The company has also taken a hard stand on...
Fedora Update for drupal7 FEDORA-2011-8879
Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2011-8879 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
Security Metrics Go Prime Time at Metricon 6
The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...
Tagonet Portal SQL Injection
Exploit Title:Tagonet Portal SQL Injection Vulnerability + Author: Net.Edit0r + Saftware : http://www.tagonet.co.il/ + Date : 2011.06.28 + Test on : Windowss XP SP3 + Category : webapps Exploit Dork : Powered by Tagonet Exploit : http://www.Target.com/news.asp?id=551 having 1=1-- Demo :...