jquery-ui Tooltip widget vulnerable to XSS

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

Moderate severity vulnerability that affects jquery-ui

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting

Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable PopCash.Net Publisher Code Integration plugin 1.0 PopCash.Net Publisher Code Integration plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An...

SoftDatepro Dating Social Network 1.3 SQL Injection Vulnerability

SoftDatepro Dating Social Network version 1.3 suffers from a remote SQL injection vulnerability. Exploit Title: SoftDatepro Dating Social Network 1.3 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.softdatepro.com/ Software Link:...

agency-software.org XSS vulnerability

Vulnerable URL: https://agency-software.org/demo/client/clientdisplay.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5719656 VIP website status:| No Coordinated Disclosure Timeline: Description| Valu...

demo.gravitypdf.com XSS vulnerability

Vulnerable URL: https://demo.gravitypdf.com/wp/wp-admin/admin.php?page=gfeditforms=settings=pdf=13'"0& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Article Directory Script 3.0 SQL Injection

Exploit Title: Article Directory Script 3.0 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.yourarticlesdirectory.com/ Software Link: http://www.yourarticlesdirectory.com/ Demo: http://www.yourarticlesdirectory.com/livedemo.php Version: 3.0 Category: Webapps Tested on:...

ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download

Exploit Title: ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Dork: N/A Date: 29.09.2017 Vendor Homepage: https://codecanyon.net/user/lemonadeflirt Software Link: https://codecanyon.net/item/converto-video-downloader-converter/13225966 Demo: http://vd.googglet.com/ Version:...

Bitwarden: Export vault feature is vulnerable to CSV injection

Hello guys I don't know if you care about this issue but it seems that the export feature in your https://vault.bitwarden.com//tools is vulnerable to CSV injection. If a CSV contains a malicious command it may have big impact Even though there is a popup notification for users before opening the...

WordPress Plugin WPAMS - SQL Injection

Exploit Title: WPAMS - Apartment Management System for wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpams-apartment-management-system-for-wordpress/15946837 Demo:...

Lending And Borrowing - pid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Lending And Borrowing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/lending-borrowing-script/ Demo:...

Contact Manager 1.0 - (femail) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Contact Manager 1.0 - SQL Injection Dork: N/A Date: 15.09.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.contactmanagerscript.com/download/contactmanager1380185909.zip Demo:...

Sielco Sistemi Winlog 2.07.16 Buffer Overflow

require 'msf/core' class MetasploitModule 'Sielco Sistemi Winlog %q This module exploits a stack based buffer overflow found in Sielco Sistemi Winlog 'James Fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'References' = , 'Privileged' = true, 'DefaultOptions' = 'EXITFUNC' = 'thread',...

ICClassifieds 1.1 - SQL Injection

Exploit Title: Classifieds Software Script Like Craigslist 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/craigslist-like-classifieds-script.htm Demo: http://icloudcenter.net/demos/icclassifieds/ Version: 1.1...

IC-T-Shirt 1.2 - 'key' SQL Injection

Exploit Title: Custom T-Shirt WebStore Script 1.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/t-shirt.htm Demo: http://icloudcenter.net/demos/ictshirt/ Version: 1.2 Category: Webapps Tested on:...

ICProjectBidding 1.1 - SQL Injection

Exploit Title: Project Bidding Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/projectbiddingscript.htm Demo: http://www.icloudcenter.net/demos/icprojectbidding/ Version: 1.1 Category: Webapps Tested on...

ICRestaurant software 1.4 - key SQL Injection

ICRestaurant software 1.4 - key SQL Injection Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo: http://icloudcenter.net/demos/icrestaurant/...

Job Board Software 1.0 SQL Injection

Exploit Title: Job Board Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/job-board-software Demo: http://jobsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Restaurant Website Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0...

Restaurant Website Script 1.0 - SQL Injection

Restaurant Website Script 1.0 - SQL Injection Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version:...