Airtame HDMI dongle session fixation vulnerability

The AIRTAME HDMI dongle is a wireless access point product for connecting, sharing and split-screen TVs or monitors. A security vulnerability exists in the /bin/login.php file of the Web Panel in the Airtame HDMI dongle using firmware versions prior to 3.0. The vulnerability can be exploited by a...

WordPress Plugin Blubrry PowerPress Podcast 'admin.php' Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Blubrry PowerPress Podcast 'admin.php' due to the program...

eFront 3.6.14 Cross Site Scripting Vulnerability

eFront version 3.6.14 build 18012 suffers from multiple stored cross site scripting vulnerabilities. EDB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage:...

Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

PBBoard 2.1.1 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================= PBBoard 2.1.1 Multiple Remote Vulnerabilities ============================================= |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com|...

68kb Knowledge Base v1.0.0rc3 edit main settings CSRF

Exploit for php platform in category web applications ===================================================== 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF ===================================================== Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date:...

Adult Video Site Script Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Adult Video Site Script Multiple Vulnerabilities ================================================ ======================================================================================== |...

Love garden(lovers blog version) v3. 6 vulnerability-vulnerability warning-the black bar safety net

Code by Link /Reprint please indicate the/ Originally wanted to get this when was a Christmas gift for so and so. Ever since the download of the erection. The results found that there are a few holes in the cave. I thought this 0day no commercial value when it is an academic discussion lost out...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

Fedora Update for xfce4-cpugraph-plugin FEDORA-2007-4385

Check for the Version of xfce4-cpugraph-plugin OpenVAS Vulnerability Test Fedora Update for xfce4-cpugraph-plugin FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Acc Statistics 1.1 - Insecure Cookie Handling

Acc Statistics 1.1 - Insecure Cookie Handling / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : AccStatistics v1.1 Insecure Cookie Handling Script :...

Symphony 1.7.01 (non-patched) - Remote Code Execution

Symphony 1.7.01 non-patched - Remote Code Execution db-fetchRow0, $sql; ... ... ifisset$COOKIESYMCOOKIE $args = unserialize$COOKIESYMCOOKIE; $result = $this-login$args'username', $args'password', true, false; ------------------/source code--------------------- password value from cookie is not...

Maian Recipe <= 1.2 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ========================================================== Maian Recipe = 1.2 Insecure Cookie Handling Vulnerability ========================================================== Discovered By: S.W.A.T. DORK: Powered by: Maian Recipe v1.2...

Maian Links <= 3.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ========================================================= Maian Links = 3.1 Insecure Cookie Handling Vulnerability ========================================================= Discovered By: S.W.A.T. DORK: Powered by: Maian Links v3.1 Vendor...

Debian: Security Advisory (DSA-1161)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2006-4574

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...