CVE-2011-1892

CVE-2011-1892 targets SharePoint-related products (SharePoint Server/Workspace/ Groove components, Office Web Apps, Windows SharePoint Services, etc.). The flaw is an XXE-style vulnerability where Web Parts containing XML classes referencing external entities allow remote authenticated users to r...

PT-2011-3453

Name of the Vulnerable Software and Affected Versions Microsoft Office Groove 2007 SP2 SharePoint Workspace 2010 Gold and SP1 Office Forms Server 2007 SP2 Office SharePoint Server 2007 SP2 Office SharePoint Server 2010 Gold and SP1 Office Groove Data Bridge Server 2007 SP2 Office Groove Managemen...

AstroCMS SQL Injection / File Disclosure

Exploit Title: AstroCMS Multiple Remote Vulnerabilities Google Dork: none Date: 12.03.2011 Author: brainpillow Software Link: http://www.astrocms.com/ Version: UNKNOWN ============================================================ FORGOTPASSWORD SQL-INJ EXPLOIT:...

Pluck CMS 4.7 - Multiple Local File Inclusion File Disclosure Vulnerabilities

Pluck CMS 4.7 - Multiple Local File Inclusion File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/49525/info Pluck is prone to multiple file-include and a file-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the...

CVE-2011-3391: Undefined Security Weakness

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu...

Pluck CMS 4.7 - Multiple Local File Inclusion / File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/49525/info Pluck is prone to multiple file-include and a file-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view an...

Pluck 4.7 multiple vulnerabilities

Exploit for php platform in category web applications Exploit Title: Pluck 4.7 multiple vulnerabilities Google Dork: Powered by pluck Date: 05/08/2011 Author: Bl4k3 Software Link: http://www.pluck-cms.org/?file=download Version: 4.7 Tested on: Debian CVE : / 1-File Inclusion:...

WordPress Yoast 4.1.3 Local File Disclosure

!/bin/python print "" print " Exploit Title:WordPress Yoast v4.1.3 Local File Disclosure Vulnerability" print " Author:Angel Injection " print " Home Page: http://dev-point.com http://sec-krb.org " print " Exploit find By H7acker110 " print " python exploit find By Miroslav Stampar " print "...

WordPress Yoast v4.1.3 Local File Disclosure Vulnerability

No description provided by source. !/bin/python print "" print " Exploit Title:WordPress Yoast v4.1.3 Local File Disclosure Vulnerability" print " Author:Angel Injection " print " Home Page: http://dev-point.com http://sec-krb.org " print " Exploit find By H7acker110 " print " python exploit find...

WordPress Yoast v4.1.3 Local File Disclosure Vulnerability

Exploit for php platform in category web applications !/bin/python print "" print " Exploit Title:WordPress Yoast v4.1.3 Local File Disclosure Vulnerability" print " Author:Angel Injection " print " Home Page: http://dev-point.com http://sec-krb.org " print " Exploit find By H7acker110 " print "...

WordPress UnGallery 'zip' Parameter Local File Disclosure Vulnerability

The UnGallery plug-in for WordPress is prone to a local file- disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

WordPress UnGallery 'source_vuln.php' Local File Disclosure Vulnerability

The UnGallery plug-in for WordPress is prone to a local file- disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

OTRS Local File Disclosure Vulnerability (OSA-2011-03)

Open Ticket Request System OTRS is prone to a local file disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress UnGallery 1.5.8 File Disclosure

Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip Version: 1.5.8 tested --- PoC --- !/bin/python import...

WordPress UnGallery plugin <= 1.5.8 Local File Disclosure Vulnerability

No description provided by source. Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip Version: 1.5.8 tested -...

WordPress UnGallery plugin <= 1.5.8 - Local File Disclosure

This vulnerability allows an attacker to obtain important information from local files on computers running the vulnerable application. Other attacks are also possible. Solution Update the plugin...

WordPress Plugin UnGallery 1.5.8 - Local File Disclosure

WordPress Plugin UnGallery 1.5.8 - Local File Disclosure Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip...

WordPress UnGallery plugin <= 1.5.8 Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip...

WordPress Plugin UnGallery 1.5.8 - Local File Disclosure

Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip Version: 1.5.8 tested --- PoC --- !/bin/python import...

RHEL 5 / 6 : subversion (RHSA-2011:0862)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0862 advisory. - subversion moddavsvn: DoS crash via request to deliver baselined WebDAV resources CVE-2011-1752 - subversion moddavsvn: DoS excessive...