7031 matches found
Nodejs - 'js-yaml load()' Code Exec (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Nodejs js-yaml load Code Exec',...
Nodejs js-yaml load() Code Execution Vulnerability
For node.js applications that parse user-supplied YAML input using the load function from the 'js-yaml' package versions below 2.0.5, specifying a self-executing function allows us to execute arbitrary javascript code. This Metasploit module demonstrates that behavior. This file is part of the...
Mental JS Sandbox Bypass
Title: Mental JS Sandbox Bypass Product: Mental JS Author: Rafay Baloch And Gliuseppe Trotta @guitro Company: RHAINFOSEC Website: http://services.rafayhackingarticles.net ============ Description ============ Mentaljs is a js sandbox created by Gareth Heyes, the JS sandbox is inserted at beginnin...
PT-2013-3369
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 Thunderbird versions prior to 24.0 SeaMonkey versions prior to 2.21 Description The issue is related to a use-after-free vulnerability in the JS GetGlobalForScopeChain function. This vulnerability allows...
CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE
Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Content Spoofing, Cross-Site Scripting and Full Path...
Talking about my company for security emergency response-vulnerability warning-the black bar safety net
0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...
WordPress Comment Extra Fields 1.7 CSRF / XSS
Description : Wordpress Plugins - Comment Extra Fields XSRF/XSS Injection : http://site/wordpress/wp-content/plugins/comment-extra-field/scripts/swfupload.swf?movieName=";catcheif!self.aself.a=!alert'XSS';//...
CVE-2013-2209
Cross-site scripting XSS vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
WordPress JS Restaurant Plugin SQLi Vulnerability - Active Check
The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
WordPress JS Restaurant SQL Injection
Exploit Title : Wordpress JS Restaurant Plugin SQL Injection Vulnerability Author : Ashiyane Digital Security Team Security Risk : HIgh Google Dork : inurl:/wp-content/plugins/js-restaurant/popup.php?restuarantid= Location:site/path/wp-content/plugins/js-restaurant/popup.php?restuarantid=SQLi DEm...
CVE-2013-4660
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...
Code injection
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...
CVE-2013-4660
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...
CVE-2013-4660
CVE-2013-4660 affects the JS-YAML package for Node.js prior to 2.0.5. The vulnerability arises when parsing YAML input with the unsafe !!js/function tag, which can trigger an eval and allow remote code execution. IBM X-Force/other sources confirm a high-severity impact (code execution via crafted...
CVE-2013-4660
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...
PT-2013-5118
Name of the Vulnerable Software and Affected Versions js-yaml versions 2.0.4 and earlier Description The issue allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation, due to the JS-YAML module parsing input without properly considering the unsafe...
CVE-2013-4660: Improper Input Validation
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...
通达OA微讯功能持久性XSS漏洞
简要描述： 通达oa的微讯功能，可以时时发送信息给在线的用户不在线的用户当登录时即可收到，信息中可以插入脚本代码，当发送信息给指定的用户时，对方会立刻接收到信息，可能造成cookie被盗，以及执行某些操作，如自动发布分享，添加日志，删除日志等操作。 详细说明： 测试的版本是office anywhere 2011 漏洞证明： 微讯发送后的效果，发现并没有弹出对画框。 通过burp suite看是某些符号在输入的时候被转译了 尝试把被转译后的符号修改回来后再次发送 修改数据包后再次发送的效果图如下：...
Server: Multiple XSS vulnerabilities
Cross-site scripting XSS vulnerabilities in js/viewer.js inside the filesvideoviewer application via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and 4.5.12 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files. CVE-2013-2150...