Moodle Design Bugs

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Moodle version 2.8.x prior to 2.8.11, which stems...

Easy Author Image 1.5 - Email Disclosure

When the plugin, "Easy Author Image" is used in a Wordpress site to handle user comments, what it does is put the email address of the commentator in the "alt" field of the user's avatar...

WordPress Easy Author Image Plugin <= 1.5 - Email Disclosure

This plugin is prone to an email disclosure vulnerability. Solution There is no fixing, because plugin is no longer be maintained...

Eobot: Multiple information disclosure

This script can help hackers check leaked email bases on registration with eobot without ban and etc.. https://www.eobot.com/[email protected] email disclosure in google google dork: site:eobot.com inurl:"widget.aspx" in result we see requests with email of your users...

X (Formerly Twitter): getting emails of users/removing them from victims account [using typical attack]

Hey Hi, I would like to explain a typical type of attack combined with a brute force attack leading to email disclosure. conditions : should be having email notifications ON . Every time someone follows me , favs my tweet i get a notification on my email, and the footer of the email . click here ...

Dovecot IMAP 1.0.10 <= 1.1rc2 - Remote Email Disclosure Exploit

No description provided by source. lame Dovecot IMAP 1.0.10 - 1.1rc3 Exploit Here's an exploit for the recent TAB vulnerability in Dovecot. It's nothing special since in the wild there are few to none targets because of the special option which has to be set. see CVE Entry CVE-2008-1218 Exploit...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

No description provided by source. Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: Uebimiau Webmail...

BasiliX Webmail 1.1 Email Header HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker ca...

Direct Object Reference - User Information Disclosure

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46864. panel A direct object reference vulnerability exists on the answers.atlassian.com platform which allows for malicious use...

Yahoo!: invite1.us2.msg.vip.bf1.yahoo.com/ - CSRF/email disclosure

Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...

Slack: Session Fixation disclosing email address

Desc: Session fixation occurs due to SessionID in URL. A valid session-URL should be only a one time use. In this case a valid session-URL remains active for infinite time. The browser/cache may store this unique Session-URL and disclose EMAIL address of the user. Working: 1Register 2One...

Vulnerability in Facebook discloses Primary Email Address of any account

When you sign up on Facebook, you have to enter an email address and that email address becomes your primary email address on Facebook. In a recent disclosure by a Security researcher, Stephen Sclafani - The Social Networking site Facebook was vulnerable to disclosure of primary email address of...

CVE-2011-4593

CVE-2011-4593 affects Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3, where the messaging interface incorrectly handles user/action_redir group messages, allowing remote authenticated users to discover e-mail addresses by visiting the messaging interface. Root cause: impro...

PT-2012-1925 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: The issue arises from improper handling of user/action redir group messages, allowing remote authenticated users to...

HBGary Federal CEO Aaron Barr Steps Down

Embattled CEO Aaron Barr says he is stepping down from his post at HBGary Federal to allow the company to move on after an embarassing data breach. The announcement comes three weeks after Barr became the target of a coordinated attack by members of the online mischief making group Anonymous, whi...

Uebimiau Webmail 3.2.0-2.0 Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure Examples: E.g.1 http://www.rufino.eti.br/webmail/inc/database/...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau...

Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability ============================================================ Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email...

Uebimiau Webmail 3.2.0-2.0 - Email Disclosure

Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau Webmail v3.2.0-2.0" Vuln:...

Dren's PHP Uploader Remote File Upload Vulnerability

No description provided by source. Dren's PHP Uploader Remote File Upload Vulnerability + Author : Cyb3r IntRue +Email : [email protected]:[email protected] & [email protected]:[email protected] + Date : 29/12/2009 + Software Link : http://freewebtown.com/thanigga/Dren's%20PHP%20Uploader.rar + Team :...