Microsoft Window Manager (Windows 7 x86) - Menu Management Component UAF Privilege Elevation Exploit

Exploit for windows platform in category local exploits include include include include pragma commentlib, "psapi.lib" define POCDEBUG 0 if POCDEBUG == 1 define POCDEBUGBREAK getchar elif POCDEBUG == 2 define POCDEBUGBREAK DebugBreak else define POCDEBUGBREAK endif static PVOIDfastcall...

Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.2

zzcms is a free website builder developed in asp language. A reflective cross-site scripting vulnerability exists in the step6.php file in version 8.2 of zzcms, which allows an attacker to construct an XSS statement, perform a pop-up box operation, and obtain information such as a user's cookie...

php.bildungs.tv XSS vulnerability

Open Bug Bounty ID: OBB-572986 Description| Value ---|--- Affected Website:| php.bildungs.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Groupon Clone Script 3.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Slickdeals/DealNews/Groupon Clone Script 3.0.2 – Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/groupon-clone-script/ Category: Web Application Exploit Author:...

Alibaba Clone Script 1.0.2 Cross Site Scripting

Exploit Title: Alibaba Clone Script 1.0.2 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Version...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting. CVE-2018-6867. Webapps exploit for PHP platform Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category...

Flash ActiveX 18.0.0.194 - Code Execution

Flash ActiveX 18.0.0.194 - Code Execution CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44742.swf...

Facebook Clone Script 1.0.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul...

Bitcoin MLM Software 1.0.2 - Cross-Site Scripting Vulneravility

Exploit for php platform in category web applications Exploit Title: Bitcoin MLM Software 1.0.2 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/bitcoin-mlm/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

PHP Scripts Mall Doctor Search Script 1.0.2 Cross Site Scripting

Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/doctor-search-script/...

earthproperties.com XSS vulnerability

Open Bug Bounty ID: OBB-543650 Description| Value ---|--- Affected Website:| earthproperties.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

visiononmorphett.com.au XSS vulnerability

Open Bug Bounty ID: OBB-533861 Description| Value ---|--- Affected Website:| visiononmorphett.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cutestimator.com XSS vulnerability

Open Bug Bounty ID: OBB-533703 Description| Value ---|--- Affected Website:| cutestimator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4activeladies.dk XSS vulnerability

Open Bug Bounty ID: OBB-528284 Description| Value ---|--- Affected Website:| 4activeladies.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

pozvonok.ru XSS vulnerability

Open Bug Bounty ID: OBB-472563 Description| Value ---|--- Affected Website:| pozvonok.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Auth0 auth0.js cross-origin vulnerability

Auth0.js is the client library for Auth0. A cross-origin vulnerability exists in Auth0 auth0.js prior to 8.12. An attacker could use this vulnerability to obtain an authenticated user's token and invoke a service on behalf of the user if the target site or application uses a popup callback page v...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the psnotifyd application, a printing software for Pharos PopUp, allows a intruder to execute arbitrary code.

The vulnerability of the psnotifyd application for Pharos PopUp printing is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...

CVE-2017-17068

A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions 8.12. This vulnerability allows an attacker to acquire authenticated users' tokens and invoke services on a user's behalf if the target site or application uses a popup callback page with...