SIPhone Enterprise PBX SQL Injection

E / | | | | X By \ | || | | ' \ / | ' \ / \ P BaD-HaCKeR-MaN | || /| | | | | | | | / L TheMostCompleteHackerInTheWorld |/|| || ||/|| ||| O thepunisherkazamel@skype I T + SIPhone Enterprise PBX Suffers from An authentication bypass vulnerability + Product: SIPhone Enterprise PBX + Vendor:...

CVE-2014-8683 XSS in Gogs Markdown Renderer

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 XSS in Gogs Markdown Renderer ============================= Researcher: Timo Schmid [email protected] Description =========== GogsGo Git Service is a painless self-hosted Git Service written in Go. taken from 1 It is very similiar to the github...

Gogs Markdown Renderer Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 XSS in Gogs Markdown Renderer ============================= Researcher: Timo Schmid Description =========== GogsGo Git Service is a painless self-hosted Git Service written in Go. taken from 1 It is very similiar to the github hosting plattform...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

No description provided by source. TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Paymen...

eocms 0.9.04 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22677 Reference: http://www.htbridge.ch/advisory/bbcodexssineocms.html Product: eoCMS Vendor: eocms.com http://eocms.com Vulnerable Version: 0.9.04 Vendor Notification: 21 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Woltlab Burning Board 2.2 / 2.3 [WN]KT KickTipp 3.1 remote SQL Injection

No description provided by source. ======================================================================================== | Title : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 remote SQL Injection | Author : Easy Laster | Script : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 | Site :...

Energine CMS SQL Injection Vulnerability

No description provided by source. Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed...

Immunity Debugger Stack Overflow Vulnerability – PoC

Title : Immunity Debugger – Crash POC Name: Immunity Debugger v1.85 SEH Chain Stack Overflow Discoverer: Veysel HATAŞ email protected Vendor: Immunity Inc Systems Affected: Windows Risk: Low Status: Not Fixed Discovered: 05 January 2014 Reported: 06 January 2014 Published: 20 March 2014...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

Exploit for php platform in category web applications TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================...

Quick Paypal Payments Cross Site Scripting

TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Payments Wordpress Plugin Version 3.0...

Webspell dailyinput Movie Addon 4.2.x - SQL Injection

======================================================================================== | Title : Webspell 4.2.x dailyinput Movie-Addon SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell 4.2.x dailyinput Movie-Addon | Site : www.kode-designs.com | Download :...

Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 - SQL Injection

======================================================================================== | Title : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 remote SQL Injection | Author : Easy Laster | Script : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 | Site : webnutzer.de | Price : Woltlab...

Unfixed XSS vulnerability at www.besac.com

Security researcher Atmon3r, has submitted on 15/02/2012 a cross-site-scripting XSS vulnerability affecting www.besac.com, which at the time of submission ranked 1205883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currentl...

Unfixed XSS vulnerability at kazeo.i-tchat.com

Security researcher Atmon3r, has submitted on 30/12/2011 a cross-site-scripting XSS vulnerability affecting kazeo.i-tchat.com, which at the time of submission ranked 605345 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/12/2011. It is...

CA ETrust Secure Content Manager integer overflow

Integer overflow in TCP/1882 service is not fixed in 180 days...

SCO OpenServer IMAP server buffer overflow

Buffer overflow in IMAP service is not fixed in 180 days...

NewV Smartclient 1.0.0.18 Command Execution

Vendor: NewV http:// www.newv.com.cn/ Product: NewV smartclient http://demo.newv.com.cn/lds/module/smartclientsetting.exe Vulnerable Version: 1.0.0.18 Status: Not Fixed, Vendor Alerted Risk level: High Credit: Yu Guoyuguo.cngmail.com Description: An input validation issue exists in the NewV Activ...

Phenotype CMS 3.0 SQL Injection

Vulnerability ID: HTB22769 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphenotypecms.html Product: Phenotype CMS Vendor: http://www.phenotype-cms.com http://www.phenotype-cms.com Vulnerable Version: 3.0 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: No...

Hycus CMS 1.0.3 Local File Inclusion

Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Hycus CMS - Multiple Vulnerabilities

Hycus CMS - Multiple Vulnerabilities Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status:...