Polycom IP Phone - Web Interface Data Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , 'Line 1' of 'Polycom IP Phone' software. The vulnerability allows the attacker to disclosure the password of the username for the ph...

Aastra IP Phone 9480i - Web Interface Data Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Aastra IP Phone is vulnerable for a...

HTB22995: XSS in Ajax Chat

Vulnerability ID: HTB22995 Reference: http://www.htbridge.ch/advisory/xssinajaxchat.html Product: Ajax Chat Vendor: php-development.ru Vulnerable Version: 1 Vendor Notification: 10 May 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Bridge SA Security Resear...

HTB22979: Multiple XSS (Cross Site Scripting) vulnerabilities in Argyle Social

Vulnerability ID: HTB22979 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinargylesocial.html Product: Argyle Social Vendor: Argyle Social http://argylesocial.com/ Vulnerable Version: Current at 26/04/2011 Vendor Notification: 28 April 2011 Vulnerability...

PHP Directory Listing Script 3.1 Cross Site Scripting

Vulnerability ID: HTB22968 Reference: http://www.htbridge.ch/advisory/xssinphpdirectorylistingscript.html Product: PHP Directory Listing Script Vendor: http://www.evoluted.net http://www.evoluted.net Vulnerable Version: 3.1 Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site...

Classmates XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability description: Classmates 1.1.1 design flaws, leading toXSScross-site vulnerability; user can be in a vulnerable application to execute arbitrary JavaScript code. Since the vulnerability exists in“/themes/default/header.inc.php“script is not properly sanitized of user-supplied input t...

SelectaPix Image Gallery 1.4.1 Cross Site Scripting

Vulnerability ID: HTB22964 Reference: http://www.htbridge.ch/advisory/xssinselectapiximagegallery.html Product: SelectaPix Image Gallery Vendor: http://www.outofthetrees.co.uk/ http://www.outofthetrees.co.uk/ Vulnerable Version: 1.4.1 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cro...

HTB22962: Multiple XSS in YaPiG

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

HTB22963: CSRF (Cross-Site Request Forgery) in SelectaPix Image Gallery

Vulnerability ID: HTB22963 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinselectapiximagegallery.html Product: SelectaPix Image Gallery Vendor: http://www.outofthetrees.co.uk/ http://www.outofthetrees.co.uk/ Vulnerable Version: 1.4.1 Vendor Notification: 19 April 2011...

Daily Maui Photo Widget WordPress Plugin 0.2 Cross Site Scripting

Vulnerability ID: HTB22960 Reference: http://www.htbridge.ch/advisory/xssindailymauiphotowidgetwordpressplugin.html Product: Daily Maui Photo Widget wordpress plugin Vendor: Kris Nelson http://www.webnelly.com/ Vulnerable Version: 0.2 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cro...

Snom IP Phone Web Interface Multiple Vulnerabilities

Exploit for hardware platform in category web applications / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: email protected...

Snom IP Phone Web Interface XSS / Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Snom IP Phone is vulnerable for a xss...

Noah's Classifieds 5.0.4 Cross Site Scripting

Vulnerability ID: HTB22952 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinnoahsclassifieds.html Product: Noah's Classifieds Vendor: Noah's Classifieds http://www.noahsclassifieds.org/ Vulnerable Version: 5.0.4 and probably prior versions Vendor Notification: 12 April 2011...

Snom IP Phone Web Interface 8 - Multiple Vulnerabilities

Snom IP Phone Web Interface 8 - Multiple Vulnerabilities / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected]...

Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Snom IP Phone is vulnerable for a xss...

SocialGrid WordPress Plugin 2.3 Cross Site Scripting

Vulnerability ID: HTB22940 Reference: http://www.htbridge.ch/advisory/xssinsocialgridwordpressplugin.html Product: SocialGrid wordpress plugin Vendor: Michael Whalen http://whalesalad.com Vulnerable Version: 2.3 Vendor Notification: 05 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Information disclosure

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

Blue Hat - Sensitive Database Disclosure / SQL Injection

+Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 12.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered by Blue Hat" + Category : Web Apps SQli Choose any site that comes up when you enter the dork...

HTB22923: XSRF &#40;CSRF&#41; in phpAlbum.net

Vulnerability ID: HTB22923 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpalbumnet.html Product: phpAlbum.net Vendor: Patrik Jakab http://www.phpalbum.net/ Vulnerable Version: 0.4.1-14fix06 Vendor Notification: 31 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level:...

Maia Mailguard 1.0.2a Cross Site Scripting

=================================== BUGUROO SECURITY SYSTEMS ALERT - Advisory: http://buguroo.com/adv/BugurooADV2011-001.txt - Discovered on: March 29th, 2011 - Discovered by: Mario Lopez mlopez at buguroo dot com - Severity: 5/10 =================================== 1. VULNERABILITY...