Gazine2 Cross Site Scripting

---------------------------------------------------------------- Gozine2 alert/0/ www.gozineyejavan.ir/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ www.gozine2.co/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ GreetZ To : | Am!r | B3HZ4D |...

Jessica Rhaye Design Cross Site Scripting

---------------------------------------------------------------- Jessica Rhaye Design = Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Jessica Rhaye Design = Cross Site Scripting VulnerabilitieS Author : Hack Center Security...

Group-Office Calendar SQL Injection

/------------------------------------- | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP file...

Wordocs Israel FCKeditor Shell Upload

---------------------------------------------------------------- Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities Google Dork:...

Rozblog.com Cross Site Scripting

---------------------------------------------------------------- www.rozblog.com = Cross Site scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title: www.rozblog.com = Cross Site scripting Vulnerabilities Author: Hack center Security Team Discover...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed...

Microsoft Cinepak Codec CVDecompress - Heap Overflow (MS10-055)

Microsoft Cinepak Codec CVDecompress - Heap Overflow MS10-055 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-26-microsoft-cinepak-codec-cvdecompress-heap-overflow-ms10-055/ ''' ''' Title :...

Microsoft Excel - HFPicture Record Parsing Memory Corruption

Microsoft Excel - HFPicture Record Parsing Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 23 0day binary anlysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel HFPicture Record Parsing Memory Corruption 0day Version :...

Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability

Exploit for windows platform in category dos / poc ================================================================== Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability ================================================================== Title : Apple QuickTime FLI LinePacket Remote...

RealPlayer - FLV Parsing Integer Overflow

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | = 0x7507508 -- crash flvBody2 = "\x00\x00\x09\x00\x00\x00\x20" flv = open'poc.flv', 'wb+' flv.writeflvHeader flv.writeflvBody1 flv.writeHXFLVMETAAMFTYPEMIXEDARRAYValue flv.writeflvBody2 flv.close print '- FLV file...

parsawebcms-sql.txt

www.BugReport.ir AmnPardaz Security Research Team Title: ParsaWeb CMS SQL Injection Vendor: http://www.parsagostar.com Demo: http://cms.parsagostar.com/ Exploit: Available Impact: High Fix: N/A Original advisory: http://www.bugreport.ir/index53.htm 1. Description: ParsaWeb is a commercial ASP.NET...

doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

QuickerSite 1.8.5 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description:...