1973 matches found
Livefyre LiveComments Plugin - Persistent Cross-Site Scripting
Livefyre LiveComments Plugin - Persistent Cross-Site Scripting Title : Stored XSS in Livefyre LiveComments Plugin CVE : 2014-6420 Vendor Homepage : http://livefyre.com Software Link : http://web.livefyre.com/streamhub/liveComments Version : v3.0 Author : Brij Kishore Mishra Date : 03-Sept-2014...
Livefyre LiveComments 3.0 Cross Site Scripting
Title : Stored XSS in Livefyre LiveComments Plugin CVE : 2014-6420 Vendor Homepage : http://livefyre.com Software Link : http://web.livefyre.com/streamhub/liveComments Version : v3.0 Author : Brij Kishore Mishra Date : 03-Sept-2014 Tested On : Chrome 37, Ubuntu 14.04 Description : This plugin...
Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities Google Dork: intitle:"Powered by Pro Chat Rooms" Date: 5 August 2014 Exploit Author: Mike Manzotti @ Dionach Ltd Vendor Homepage: http://prochatrooms.com Software Link:...
WordPress Picture Factory Theme - XSS
This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...
ownCloud Preview Picture Access Authentication Bypass Vulnerability
ownCloud is prone to unauthorized picture preview access. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...
Aztek Forum 4.0 - Multiple Vulnerabilities Exploit
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; / header Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435...
k-rate (sql/xss) Multiple Vulnerabilities
No description provided by source. ================================================================================ || K-Rate SQL-INJECTION, XSS ================================================================================ Application: K-Rate ------------ Website: http://turn-k.net/k-rate...
Web Group Communication Center (WGCC) <= 1.0.3 - SQL Injection Vuln
No description provided by source. Title : Web Group Communication Center XSS/SQL Multiple Remote Vulnerabilies Author : myvx Date : 13.05.2008 Application : Web Group Communication Center Version : = 1.0.3 PreRelease 1 Vendor : http://wgcc.de/ Download :...
Microsoft Office Picture Manager 2010 Crash PoC
No description provided by source. Title : Microsoft Office Picture Manager 2010 memory corruption Version : Microsoft Office professional Plus 2010 Crash : http://img715.imageshack.us/img715/7364/pocl.png Date : 2012-10-24 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkave...
Memberkit 1.0 - Remote PHP File Upload Vulnerability
No description provided by source. ================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovere...
AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions. An attacker...
Hot or Not Picture Rating Script SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Pictue rating SQL Vulnerable Version:1 Price:20$ Published:...
Threat Outbreak Alert: Fake Picture Sharing Email Messages on May 29, 2014
Medium Alert ID: 34412 First Published: 2014 May 29 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to...
yungoucms system latest SQL injection-vulnerability warning-the black bar safety net
Official website : http://www.yungoucms.com/ demo site: http://www.yungoucms.cn/ Product search you can build a SQL statement that is! http://www.yungoucms.cn/?/stag/ publicfunction tag $search =$this-segment4; if!$ searchmessage"enter search keyword"; $search = urldecode$search; $search =...
wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)
Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large record in MPEG data...
My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability
Document Title: =============== My Photo Wifi Share & PS 1.1 iOS - Local Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1232 Release Date: ============= 2014-03-24 Vulnerability Laboratory ID VL-ID:...
Threat Outbreak Alert: Fake Picture Sharing Email Messages on March 27, 2014
Medium Alert ID: 33536 First Published: 2014 March 27 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient t...
DEBIAN-CVE-2013-6424
Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service crash via a negative bottom value...
UBUNTU-CVE-2013-6424
Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service crash via a negative bottom value...
Threat Outbreak Alert: Fake Personal Picture Email Messages on December 27, 2013
Medium Alert ID: 32296 First Published: 2014 January 2 19:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo for the recipient. The text in the email message attempts to convince the recipient to open th...