Udemy: Stored XSS

Hello, Bug: Stored XSS Payload: " Browser Used: Google Chrome OS: Windows 7 Steps to Reproduce: 1 Log in to your account 2 Click on My Courses 3 Choose any enrolled courses 4 Click on Add Discussion 5 Click on Link - Insert Link 6 In URL use above Payload 7 In Text write anything 8 Click on Inser...

Design/Logic Flaw

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

CVE-2015-4542

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

CVE-2015-4542: Undefined Security Weakness

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

PT-2015-6619

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC versions prior to 5.5.3 Description The issue allows remote authenticated users to bypass intended access restrictions. This enables them to read or modify Discussion Forum Fields messages. Recommendations For versions prior...

Udemy: Ability to add pishing links in discusion ," Bypassing uneductional Links add "

refer to case number 247874 Hey devs , IF you went in course discussion and tried to add for example " evil.com " it will get blocked by your system . But if you tried to add https://support.udemy.com/ it will be added directly So using a thing i learned in old times th ' @ ' sign after a website...

Dennis Fisher and Mike Mimoso Discuss the MySQL bug, OpenSSL and the House Crypto Hearing

Dennis Fisher and Mike Mimoso discuss the post-RSA news, including the MySQL bug, the progress of the OpenSSL overhaul and the wildly entertaining House hearing on crypto backdoors. Download: digitalunderground200.mp3 Music by Chris Gonsalves...

[SECURITY] Fedora 21 Update: mailman-2.1.20-1.fc21

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

AwSnap! New Hack Can Crash Chrome Browsers of Mass Audience

Few weeks back, we reported how a string of just 13 characters could cause your tab in Chrome to crash instantly. However, there was an exception that this special 13 characters string was only working on Mac OS X computers with no impact on Windows, Android, or iOS operating systems. Now, a rece...

MyBB < 1.6.13 Multiple Vulnerabilities

Binary data 8629.prm...

RedaxScript 2.1.0 - Privilege Escalation

RedaxScript 2.1.0 - Privilege Escalation ​​​ Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1.0 suffers...

MyBB < 1.8.3 / 1.6.16 Multiple Vulnerabilities

Binary data 8612.prm...

MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities

Binary data 8618.prm...

MyBB < 1.6.12 Multiple Vulnerabilities

Binary data 8628.prm...

CVE-2014-8086

Race condition in the ext4filewriteiter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service file unavailability via a combination of a write action and an FSETFL fcntl operation for the ODIRECT flag...

Clickcess ChitChat.NET topic title XSS

No description provided by source. source: http://www.securityfocus.com/bid/8417/info It has been reported that a html injection issue exists in the Clickcess ChitChat.NET discussion forum software. The vulnerability is reported to be present in the Name and Topic Title text boxes. The problem ma...

Discussion Web 4 - Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Discussion Web Version : 4.0 Vendor : http://www.takempis.com/aboutdiscussion.htm Author : PouyaServer , [email protected] Vulnerability : DD...

Simple Discussion Board 0.1.0 - Remote File Include Vulnerability

No description provided by source. Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class:...

XMB Forum 1.6 Magic Lantern Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submittin...

DCForum 6.0 - Remote Admin Privilege Compromise Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2728/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. Versions of DCForum are vulnerable to attacks which can yield an elevation of privileges an...