Zendesk: XSS In /zuora/ functionality

Hello there, I wanted to report a XSS vulnerability in the /zuora/ functionality on the zendesk application. Affected URL: -...

The Events Calendar <= 4.1.1 - Open Redirect

The problem is located in the "tribe-bar-view" parameter that can be used to redirect a user to an arbitrary website. Timeline 2016-04-04 : Initial contact with Modern Tribe 2016-04-05 : Modern Tribe confirms the report 2016-04-07 : Modern Tribe publishes a new version 4.1.1.1 that resolves the...

Notes v4.5 iOS - Arbitrary File Upload Vulnerability

Document Title: =============== Notes v4.5 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1832 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID: ==================================== 1832...

Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)

Exploit for linux platform in category dos / poc Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version...

WordPress CM Ad Changer 1.7.2 Cross Site Scripting

FULL DISCLOSURE Product : cm-ad-changer Exploit Author : Rahul Pratap Singh Version :1.7.2 Home page Link : https://wordpress.org/plugins/cm-ad-changer/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...

Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)

CVE 2014-1303 Proof Of Concept for PS4 ============== This repository contains a poc for the CVE 2014-1303 originally disclosed by Liang Chen. It has been tested to work on system firmware 2.03, but should work for systems on a firmware 2.50, the ROP test will however only work on 2.03. Usage...

PHPBack 1.3.0 - SQL Injection

Exploit for php platform in category web applications / + Credits: hyp3rlinx Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: =================== SQL Injection CVE Reference: ============== N/A Vulnerability Details: ===================== PHPBa...

Udemy: Stored XSS at Udemy

Stored XSS at Udemy Steps: 1 Make a profile. 2 visit https://www.udemy.com/user/edit-profile/ and add the following payload in the Website input field. data:html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4= 3 Any user who visits your profile https://www.udemy.com/user/XXXXX/ and selects ''open...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

Title: Blind Injection modified eCommerce 2.0.0.0 rev 9678 Date: 16.04.2016 Category: webapps Vendor Homepage: http://www.modified-shop.org/download Software Link: http://www.modified-shop.org/forum/index.php?action=downloads;sa=downfile&id=96 Version: 2.0.0.0 rev 9678 Tested on: Apache/2.4.7, PH...

Slack: Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs

Hi, I noticed while looking at an old article I made a while ago that some links were actually inserted as javascript:-links. Doing some modifications to these actually revealed that inside editing mode, no protection is added for getting arbitrary scripts to run. This means that by catching the...

Webnet CMS 1.2 XSS / File Disclosure / SQL Injection

Exploit Title : Webnet CMS Multiple Vulnerabilities Exploit Author : Persian Hack Team Vendor Homepage : http://www.webnet.ir/ Homepage : http://www.persian-team.ir Date: 2016/04/15 Version : 1.2 POC: 1-LFDLocal File Dislocation Explain : ids Parameter encode base64 Path , you can use...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID:...

Trello: Cross site scripting in blog.trello.com

This is a cross site scripting vulnerability issue found in POST based method payload : post method service is set to be "alert1 vulenrable url : http://blog.trello.com/wp-admin/admin-ajax.php?action=essbselfpostcount&nonce=4ae59c16bc&postid=2460&service="alert1 Change this get request to post...

defa-online-image-protector <= 3.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The defa-online-image-protector WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/defa-online-image-protector/redirect.php?r=""...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 182...

Google Android - IOMX 'getConfig'/'getParameter' Information Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=711 Android: Information Disclosure in IOMX getConfig/getParameter Platform: Verified on google/razor/flo:6.0.1/MMB29O/2459718:user/release-keys Class: Information Disclosure Summary: The GETCONFIG and GETPARAMETER calls on IOMX ar...

APITest.IO: Clickjacking: X-Frame-Options header missing

same as this report https://hackerone.com/reports/7492 vulnerable :- sign in ,sign up ,and main domain poc attached...

DotCMS 3.5 Beta Cross Site Scripting

Advisory: DotCMS xss vulnerability Author: Piaox From Pingan Product Safety Group Email: [email protected] Affected Version: dotCMS 3.5 Betathe latest version Vulnerability Description lucenesearch.jsp 26 String query = request.getParameter"query"; 27 if!UtilMethods.isSetquery 28 query ...

Apple iOS 9.3 S/Plus – touch password bypass vulnerability-vulnerability warning-the black bar safety net

! Description iOS is developed by Apple Phoneoperating system, published in 2 0 0 7 years use on the iPhone and iPod Touch, and has begun to extend to other Apple devices such as the iPad and Apple TV. With Microsoft's Windows Phone Windows CEand Google's Android systems, Apple does not authorize...

Quicksilver HQ VoHo Concept4E CMS 1.0 SQL Injection

Document Title: =============== Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID:...