CVE-2011-5190

Social Book Facebook Clone 2010 has XSS vulnerabilities via PATH_INFO in multiple PHP scripts (signup.php, lostpass.php, login.php, index.php, help_tos.php, help_contact.php, help.php). The description states remote attackers can inject arbitrary web script or HTML, indicating an input sanitizati...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

How-To Video: Securing Facebook

Facebook’s active-user count is rapidly approaching one billion. The world’s largest social network, which has long been a popular target and platform for attackers, will only become a more relevant outlet for scams and other fraud as it continues to grow. While the target grows, so too does the...

Auxilium PetRatePro SQL Injection / Shell Upload

Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address 2-SQL Injection viewcomments.php parameter phid...

Foxit Reader < 5.4 Trojan DLL Injection

The version of Foxit Reader installed on the remote Windows host is prior to 5.4. It is, therefore, affected by a flaw in the Facebook Plugin facebookplugin.fpi due to how dynamic-link library DLL files are located and loaded. A local attacker can exploit this issue, via a crafted Trojan horse DL...

Disqus SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Disqus sql injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://disqus.com/ Category : webapps Google dork: intext:powered by disqus...

Attraction Website Design SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Attraction Website Design sql injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://www.attractweb.com/ Category : webapps Google dork: Site by Attracti...

Binamic Web Design Israel SQL Injection / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Binamic Web Design Israel SQL Injection / XSS Vulnerabilities Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://www.binamica.co.il/ Category : webapps Google dork: intext:"Developed by...

Seven koncepts sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Seven koncepts sql Injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: www.sevenkoncepts.com Category : webapps Google dork: Powered by: Seven koncepts...

Clipster Video - Persistent Cross-Site Scripting

Clipster Video - Persistent Cross-Site Scripting Exploit Title: Clipster Video Persistent XSS Vulnerability Date: 04/09/2012 Author: DaOne Software Link: http://www.clipsterscript.com/ Google Dork: "Powered by ClipsterScript.com" How to exploit: 1-go to : http://site.com/login.php?action=Register...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

Design/Logic Flaw

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2012-4759

CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

Clipster Video Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Clipster Video Persistent XSS Vulnerability Author: DaOne Price: $24 Software Link: http://www.clipsterscript.com/ Google Dork: "Powered by ClipsterScript.com" How to exploit: 1-go to : http://site.com/login.php?action=Register...

Facebook Timeline Eraser Chrome Plugins Dupe Tens of Thousands of Users

Nearly 100,000 Facebook users have been duped into installing third-party Chrome plugins over the past few weeks that have access to all of their data on every Web site they visit. According to research recently conducted by security firm Barracuda Networks, the unsuspecting users were tricked in...

openwysiwyg Remote File Upload Vulnerability

Exploit for php platform in category web applications db 88 d88b "" d8'8b d8' 8b ,adPPYba, ,adPPYba, ,adPPYba, 88 8b,dPPYba, ,adPPYba, d8YaaaaY8b I8 "" a8P88 I8 "" 88 88P' "8a a8" "8a d8""""""""8b "Y8ba, 8PP""""""" "Y8ba, 88 88 88 8b d8 d8' 8b aa 8I "8b, ,aa aa 8I 88 88 88 "8a, ,a8" d8' 8b "YbbdP...

Internet Explorer MSXML Uninitialized Memory (MS12-043)

Exploit for windows platform in category remote exploits Title : Internet Explorer MSXML Uninitialized Memory MS12-043 Date : 2012-09-01 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates : /SenatorofPiratesInfo Greetz : i greet to my best friends and every Moroccan...

BCM96338 ADSL Router Get pppoe password CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: BCM96338 ADSL Router Get pppoe password Author: The Black Devils BCM96338 ADSL Exploit By Nuevo Asesino Now you can get the username & the password ------------------------------------------------------ Contact...

As Bug Bounty Programs Mature, Still More Room For Growth

Google’s recent announcements that the company is doubling some of the rewards in its Chromium Vulnerability Reward Program and will also be committing up to $2 million for another round of the Pwnium contest in a couple of months brought a round of cheers from the security research community. Th...