Microsoft Internet Explorer 8 Cross Domain

IE8 Css Cross-Domain Information Disclosure Vulnerability Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2010/10/14 References: http://www.80vul.com/ie8/IE8%20Css%20Cross-Domain%20Information%20Disclosure%20Vulnerability.txt Overview: MS-071 have fixed a Cross-Domain Information...

eXV² Content Management System 2.10 Remote XSS Vulnerability

Summary eXV² is a free CMS for building and operating private home pages, small and large communities and it's also easily used for small to medium business presences. Description The CMS suffers from a remote reflected Cross-Site Scripting vulnerability when input passed thru "rssfeedURL" and...

Acoustica BeatCraft v1.02 Build 19 Local DoS Crash PoC

Exploit for windows platform in category dos / poc ====================================================== Acoustica BeatCraft v1.02 Build 19 Local DoS Crash PoC ====================================================== Download: http://www.acoustica.com/beatcraft/download.htm Tested on Windows XP Pr...

Lara Cross Site Request Forgery

Vulnerability ID: HTB22619 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlara.html Product: Lara Vendor: Geographical Media http://getlara.com/ Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Type: CSRF Cross-Site...

XSS vulnerability in PluXml

Vulnerability ID: HTB22633 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml2.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in PluXml

Vulnerability ID: HTB22634 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml3.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site...

XSS vulnerability in Ronny CMS

Vulnerability ID: HTB22622 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinronnycms.html Product: Ronny CMS Vendor: TO4KA Programming Team http://ronny-cms.ru/ Vulnerable Version: 1.1 r935 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored X...

XSRF (CSRF) in Lara

Vulnerability ID: HTB22619 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlara.html Product: Lara Vendor: Geographical Media http://getlara.com/ Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Type: CSRF Cross-Site...

XSS vulnerability in Ronny CMS

Vulnerability ID: HTB22623 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinronnycms1.html Product: Ronny CMS Vendor: TO4KA Programming Team http://ronny-cms.ru/ Vulnerable Version: 1.1 r935 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored...

XSS vulnerability in PluXml

Vulnerability ID: HTB22632 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml1.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in Ronny CMS

Vulnerability ID: HTB22630 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinronnycms2.html Product: Ronny CMS Vendor: TO4KA Programming Team http://ronny-cms.ru/ Vulnerable Version: 1.1 r935 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored...

XSS vulnerability in Lantern CMS

Vulnerability ID: HTB22620 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinlanterncms.html Product: Lantern CMS Vendor: Lantern http://www.lanterncms.com/www/html/7-home-page.asp Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 22 September...

XSS vulnerability in Expression CMS

Vulnerability ID: HTB22618 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinexpressioncms1.html Product: Expression Vendor: Backbone Technology http://www.backbonetechnology.com Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 22 September 201...

Overlook 5 Cross Site Scripting

OverLook v5.0 Cross-site Scripting alert/1337/ document.forms0.submit;...

OrangeHRM 2.6.0.1 - Local File Inclusion

OrangeHRM 2.6.0.1 - Local File Inclusion Exploit Title: OrangeHRM 2.6.0.1 Local File Inclusion Vulnerability Date: 11-10-2010 Author: ZonTa - LkHackerZ - Mail: zontahackersatgmaildotcom Software Link: http://www.orangehrm.com/product-download.php?type=stable-zip...

Expression Cross Site Scripting

=================================== Vulnerability ID: HTB22618 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinexpressioncms1.html Product: Expression Vendor: Backbone Technology http://www.backbonetechnology.com Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...

FoxPlayer 2.3.0 - '.m3u' Buffer Overflow

!/usr/bin/perl Title: FoxPlayer Version 2.3.0 .m3u Local BOF PoC Download: http://www.foxmediatools.com/products/foxplayer.html Tested on WinXP Pro SP2 Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec and inj3ct0r teams my $junk= "\x41" x 218 ; Application will crash...

ASP.NET Padding Oracle Vulnerability (MS10-070)

Exploit for windows platform in category remote exploits =============================================== ASP.NET Padding Oracle Vulnerability MS10-070 =============================================== Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html...

Unfixed XSS vulnerability at forums.digiguide.com

Security researcher nullbyt3 , has submitted on 10/07/2010 a cross-site-scripting XSS vulnerability affecting forums.digiguide.com, which at the time of submission ranked 4410874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...