The Oak Ridge National Laboratory Hacked !

A top United States federal lab was the victim of a "silent" cyberattack earlier this month, news outlets are reporting The Oak Ridge National Laboratory in Tennessee was the victim, according to Nextgov.com. The lab is an energy department laboratory that studies nuclear fusion, supercomputing,...

ZenPhoto 1.4.0.3 Cross Site Scripting

Exploit Title: ZenPhoto 1.4.0.3 patched 2011-4-19 x-forwarded-for HTTP Header presisitent XSS Date: 21-4-2011 Author: Saif El-Sherei Software Link: http://zenphoto.googlecode.com/files/zenphoto-1.4.0.3.zip Version: 1.4.0.3 latest updated 2011-4-19 Tested on:FF 3.0.15, IE 8 Info: Zenphoto is an...

Oak Ridge National Laboratory Cuts Off Internet, E-mail After Attack

The Oak Ridge National Laboratory, a science and technology complex that houses one of the world’s fastest computers, was forced to suspend Internet access and e-mail capabilities for employees on Friday in response to what has been described as a targeted phishing attack, according to...

Supreme Court of Canada vulnerable to non prsistance xss attack !

Supreme Court of Canada vulnerable to xss attack ! Vunl Link : https://sr.scc-csc.gc.ca/search?client=SCC-CSC&site=Internet&output=xmlnodtd&proxystylesheet=SCC-CSC&hl=en&oe=latin1&ie=latin1&q=%3E%22%3E%3CMARQUEE%3EHACKED+BY+ZERO+COOL%3C%2FMARQUEE%3E&btnG=Search Found n Submitted by : Zero Cool...

O2 classic router: persistent cross site scripting (XSS) and cross site request forgery (CSRF)

O2 classic router: persistent cross site scripting XSS and cross site request forgery CSRF References https://vulners.com/cve/CVE-2010-1482 http://int21.de/cve/CVE-2011-0746-o2-router.html Description The default DSL router shipped by the german company O2 is completely vulnerable to persistent...

O2 Classic Router Cross Site Request Forgery / Cross Site Scripting

O2 classic router: persistent cross site scripting XSS and cross site request forgery CSRF References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1482 http://int21.de/cve/CVE-2011-0746-o2-router.html Description The default DSL router shipped by the german company O2 is completely...

Yaws-Wiki 1.88-1 (Erlang) - Persistent Reflective Cross-Site Scripting

Yaws-Wiki 1.88-1 Erlang - Persistent Reflective Cross-Site Scripting Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install...

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authentic...

Inside Story : How RSA was got hacked !

Inside Story : How RSA was got hacked ! The hack last month at RSA Security has been shrouded in mystery. How did a hacker manage to infiltrate one of the world's top computer-security companies? And could the data that was stolen be used to impair its SecurID products, which are used by 40 milli...

Easy File Sharing Web Server 5.8 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

Claroline 1.10 Persistent XSS Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

Claroline 1.10 Cross Site Scripting

------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.claroline.net/ Disclosure Date.........4/6/2011 Tested...

Easy File Sharing Web Server 5.8 Cross Site Scripting

------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.sharing-file.com/ Disclosure...

Claroline 1.10 - Persistent Cross-Site Scripting

Claroline 1.10 - Persistent Cross-Site Scripting ------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

PyroCMS 1.1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................PyroCMS 1.1.0 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://pyrocms.com/ Vendor Contact Date.....3/11/2011 Disclosure...

Simple Machines Forum <= 1.1.12 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-13...

Simple Machines Forum <= 1.1.13 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-08...

Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting / XML Injection

Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xml".submit; function xssdocument.forms"xss".submit; br...

Newscoop 3.5.1 Cross Site Scripting

------------------------------------------------------------------------ Software................Newscoop 3.5.1 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.sourcefabric.org/en/products/newscoopoverview/ Vendor...

OpenCollab 1.4.3 Cross Site Scripting

------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...