ArcSight Logger - Arbitrary File Upload Code Execution

ArcSight Logger - Arbitrary File Upload Code Execution Exploit Title: ArcSight Logger - Arbitrary File Upload Code Execution Date: 13.03.2015 Exploit Author: Julian Horoszkiewicz Vendor Homepage: www.hp.com Software Link:...

Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability

Document Title: =============== Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1447 Release Date: ============= 2015-03-13 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Drive HD v1.8 - File Upload Web Vulnerability

Document Title: =============== Mobile Drive HD v1.8 - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1446 Release Date: ============= 2015-03-11 Vulnerability Laboratory ID VL-ID: ==================================== 1446...

Concrete CMS: Stored XSS in Image Alt. Text

XSS payload can be executed and saved permanently in Image Alt. Text. Poc Code: "click me!"...

Concrete CMS: Stored XSS in Message to Display When No Pages Listed.

XSS payload can be executed and saved permanently in Message to Display When No Pages Listed. Poc code: "...

Concrete CMS: Stored XSS in Bio/Quote

XSS payload can be executed and saved permanently in testimonial Bio/Quote. Poc code: "...

Concrete CMS: Stored XSS In Company URL

XSS payload can be executed and saved permanently in testimonial Company URL. Poc code: "...

Concrete CMS: Stored XSS in testimonial Company

XSS payload can be executed and saved permanently in testimonial Company. Poc code: "...

Concrete CMS: Stored XSS in Testimonial Position

XSS payload can be executed and saved permanently in Testimonial Position. Poc code: "...

Concrete CMS: Stored XSS in Testimonial name

XSS payload can be executed and saved permanently in Testimonial name. Poc code: "...

Concrete CMS: Stored XSS in Feature tile

XSS payload can be executed and saved permanently in Feature tile . Poc code: "...

Concrete CMS: Stored XSS in title of date navigation

XSS payload can be executed and saved permanently in title of date navigation. Poc code: "...

Concrete CMS: Stored XSS on Search Title

XSS payload can be executed and saved permanently in search title. Poc code: "...

Concrete CMS: Stored XSS on Blog's page Tile

In blog page Custom Title Text , xss payload can be executed and saved permanently . Poc: "...

MikroTik RouterOS Cross Site Request Forgery

MikroTik RouterOS v5.0 Admin Password Change CSRF Vulnerability by @SymbianSyMoh What is MikroTik RouterOS?! MikroTik RouterOS is an operating system based on the Linux kernel, known as the MikroTik RouterOS. Installed on the company's proprietary hardware RouterBOARD series, or on standard...

OpenKM Stored Cross Site Scripting

Exploit Title: OpenKM Platform Remote Reflected Cross Site Scripting Google Dork: N/A Date: 18-11-2014 Exploit Author: Mohamed Abdelbaset Elnoby @SymbianSyMoh Vendor Homepage: http://www.openkm.com/en / Software Link: http://www.openkm.com/en/download-english.html Version: All versions...

Concrete CMS: Self Xss on File Replace

In File manager there is an Replace option to replace files from three resources . 1. from computer 2.incoming 3.Remote files For remote files if we put http://example.com/" in the url box It reflects xss. Poc: https://www.dropbox.com/s/m7pb9wiwxix1oyu/replacexss.mkv?dl=0 Thanks...

Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability

Ultimate PHP Board UPB version 2.2.7 suffers from a cross site scripting vulnerability. Exploit Title : Ultimate PHP Board UPB 2.2.7 Cross Site Scripting Vulnerability CVE : CVE-2015-2217 Date : 4 March 2015 Exploit Author : CWH Underground Discovered By : ZeQ3uL Site : www.2600.in.th Vendor...

VFU 4.10-1.1 - Move Entry Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Title: VFU Move Entry Buffer Overflow Date: 2015-02-25 Exploit Author: Bas van den Berg -- @barrebas Vendor Homepage: http://cade.datamax.bg/ Software Link: http://cade.datamax.bg/vfu/download Version: 4.10-1.1 Tested on: GNU/Linux Kal...

CVE-2 0 1 5-0 2 0 4 OpenSSL FREAK Attack vulnerability detection methods and repair recommendations-vulnerability warning-the black bar safety net

0×0 1 Introduction Near the Lantern Festival on the occasion, OpenSSL and because of the FREAK attack（also known as the Factoring Attack on RSA-EXPORT Keys vulnerability or CVE-2 0 1 5-0 2 0 4. the vulnerability fights uproar. Apple and Google are in on Tuesday indicated that they are fixing the...