Uber: Design Issue at riders.uber.com/profile

Summary Hello, This is not actually a security threat but a design issue. When a user logs into rush.uber.com, he will get an option called Account Information, when clicked on it takes the user to page https://riders.uber.com/trips where user can edit his profile information. Here user can...

imo cloud Office system /Customize/Audit/auditreport/downnmsg.php file the uid parameter SQL injection vulnerability

No description provided by source...

Stickman Downhill Monstertruck - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stickman Downhill Monstertruck published at the 'play' market has multiple vulnerabilities...

wordpress <4.4.1 wp-admin/customize.php 页面 xss

No description provided by source...

WordPress Customize Youtube Videos 0.2 Cross Site Scripting Vulnerability

WordPress Customize Youtube Videos plugin version 0.2 suffers from cross site scripting vulnerabilities. Title: WordPress 'Customize Youtube Videos' Plugin Version: 0.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: -...

WordPress Customize Youtube Videos 0.2 Cross Site Scripting

Title: WordPress 'Customize Youtube Videos' Plugin Version: 0.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/customize-youtube-videos/ - https://plugins.svn.wordpress.org/customize-youtube-videos/ Notified Vendor/WordPress:...

Buffer overflow

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file...

CVE-2015-1362

CVE-2015-1362 affects Two Pilots Exif Pilot 4.7.2, where a buffer overflow in the "Customize 35mm" tab allows remote attackers to execute arbitrary code via a long string in the maker element of an XML file. Affected component: Exif Pilot application; root cause: overflow in parsing the maker ele...

Exif Pilot 4.7.2 - Buffer Overflow (SEH)

!/usr/bin/env ruby Exploit Title: Exif Pilot SEH Based Buffer Overflow Version: version 4.7.2 Download: http://www.colorpilot.com/load/exif.exe Tested on: Windows XP sp2 Exploit Author: Osanda M. Jayathissa E-Mail: osandacatunseen.is =begin Click Tools Options Customize 35mm tab Import and choose...

CVE-2014-5203

CVE-2014-5203 affects WordPress 3.9.x before 3.9.2, where the widget implementation in wp-includes/class-wp-customize-widgets.php can be triggered to execute arbitrary code via crafted serialized data. The NVD/NVИ records show a high severity (base score 7.5) with network exploitability and no au...

[Exploit Pack] The most advanced and easy to use tool for pentesters

Exploit Pack is an open source GPLv3 licensed bundle of scripts known as exploits with an easy to use GUI and a SID IDE. It’s built on JAVA and Python, which means it’s easy to customize and works very nicely on any device. Like every software that has an open source license you can patch, extend...

Apache Blocks IE 10 Do Not Track Privacy Setting

The co-founder of the Apache HTTP Server Project is under fire for a patch that instructs the world’s most popular Web server to ignore the Do Not Track privacy setting enabled by default in Internet Explorer 10. Do Not Track is a specification under consideration by the W3C and under development...

PRE PRINTING STUDIO - SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Exploit for php platform in category web applications Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Freelancers Marketplace Shell Upload

Name : Freelancers Marketplace Script Upload Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

PHP Video Battle - SQL Injection

PHP Video Battle - SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Photos

On the left is the default. You want to turn off Everyone. And change Networks so none of your networks will get automatic permission unless you specifically want that, like old school pictures. Then choose whether you want Friends of Friends, etc., or to customize, choose Some Friends. Then star...

Photos

When you create a new album, you get this page. Click where it says Everyone so you can then choose to customize the settings to determine who can see this album...

Remedy for: Remot File Include In phpexplorator_2_0

Best Remedy: Configure a web server authentification for using file phpexplorator.php. Good Remedy: Use phpexplorator.class.php and personalise it like your want see http://sourceforge.net/forum/forum.php?threadid=1664845&forumid=637317 Another remedy: Permute line 4902 with line 4903 like this:...

PT-2002-2929 · Wsc · Web Server Creator - Web Portal

Name of the Vulnerable Software and Affected Versions: Web Server Creator - Web Portal WSC-WebPortal version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the l parameter to customize.php or the pg parameter to...