1484 matches found
LibAnswers Springshare Library Cross Site Scripting
Exploit Title: LibAnswers Springshare Library Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.springshare.com/libanswers/ Google Dorks: browse.php?tid= intext:Powered by Springshare Web Browser: Mozilla Firefox Blog: http://st2tea.blogspot.com PoC:...
FBI Looking for App to Monitor Twitter and Facebook For Threat Data
The FBI is in the early stages of developing an application that would monitor sites such as Twitter and Facebook, as well as various news feeds, in order to find information on emerging threats and new events happening at the moment. The tool would give specialists the ability to pull the data...
broadcast-xdmcp-discover NSE Script
Discovers servers running the X Display Manager Control Protocol XDMCP by sending a XDMCP broadcast request to the LAN. Display managers allowing access are marked using the keyword Willing in the result. Script Arguments broadcast-xdmcp-discover.timeout socket timeout default: 5s Example Usage...
PT-2011-5112
Name of the Vulnerable Software and Affected Versions phpAlbum versions 0.4.1.16 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the var1 and keyword parameters in...
CVE-2011-4806: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 var1 and 2 keyword parameters...
CVE-2010-4913
The OpenVAS entry confirms that ColdGen ColdUserGroup is prone to both Cross-Site Scripting (XSS) and SQL Injection vulnerabilities. The CVE-2010-4913 entry describes an XSS flaw in the search feature of ColdGen ColdUserGroup 1.06, exploitable via the Keywords parameter to inject arbitrary script...
NetGear C DSL Router R0318 - Multiple Web Vulnerabilities
Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...
[SECURITY] Fedora 14 Update: libextractor-0.6.2-1402.fc14
libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen...
MEFE EMLAK (FCKEditor) Artibary File Upload
Exploit for php platform in category web applications / \ | / / / / / | / / / // / /| | / // / /| | / / / // / , / | / / | / / / // || // ||// // // // ||// // My + Author : KaCaK Contact : email protected HomePage : http://www.griadamlar.com Special Thanks GRAYHATZ, and GriAdamlar / / / / / / /...
Web Server Pornographic Material Detected (keyword 15)
Binary data 5874.prm...
Taste how beautiful Site Navigation v2010. 1 2 3 1 Xss-vulnerability warning-the black bar safety net
Version:to taste how beautiful Site Navigation v2010. 1 2 3 1 Keywords:"程序 开发 :Weiduomei.Net" Front Desk use,submit site features/login. asp In the URL a column submitted toXSSstatement, Management in the background of the audit will be performed whenXSSstatement in the command The present times...
Byte2 SQL Injection / Cross Site Scripting
======================================================= Byte2 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...
IBM Informix Dynamic Server DBINFO关键字远程栈溢出漏洞
BUGTRAQ ID: 44190 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server没有正确地处理用户在SQL查询中提交给DBINFO关键词的参数，远程攻击者可以通过提交恶意查询请求触发栈溢出，导致以数据库服务器的权限执行任意代码。 IBM Informix Dynamic Server 11.50.xC3 IBM Informix Dynamic Server 11.10.xC3 IBM Informix Dynamic Server 10.00.xC10 厂商补丁： IBM ---...
PT-2010-5273
Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server IDS versions 7.x through 7.31 IBM Informix Dynamic Server IDS versions 9.x through 9.40 IBM Informix Dynamic Server IDS versions 10.00 through 10.00.xC9 IBM Informix Dynamic Server IDS versions 11.10 through 11.10.x...
CVE-2010-4069: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in IBM Informix Dynamic Server IDS 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka...
Fedora 14 : phpMyAdmin-3.3.7-1.fc14 (2010-14501)
Changes for 3.3.7.0 2010-09-07 - PDF scratchboard Cannot drag table box to the edge after a page size increase, thanks to Martin Schonberger - mad05 - core Fixed displaying number of rows - parser Fixed wrong definition of keywords - setup Fixed escaping of server name XSS, PMASA-2010-7 Note that...
CVE-2010-0134
Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...
Star outside the virtual host management system brush money vulnerability+injection vulnerability-vulnerability warning-the black bar safety net
Test station: http://www.. com/ Register for an account, for example: test Visit: http://www.. com/netpay/ips/ Enter your username and amount of recharge. For example: test 1 $ 0 Point the next step will be to generate you an order number. Such as 7 2 2 9 7 8 Remember it Parameter structure:...