1276 matches found
Epicor Enterprise 7.4 - Multiple Vulnerabilities
Epicor suffers from cross site scripting and password disclosure vulnerabilities. "Epicor Enterprise vulnerabilities" - Affected vendor: Epicor Software Corporation - Affected system: Epicor Enterprise - Version 7.4 - Vendor disclosure date: May 13th, 2014 - Public disclosure date: September 30th...
Nagios XI < 2011R1.9 Multiple Vulnerabilities
Binary data 8363.prm...
MyConnection Server (MCS) 9.7i Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Author: 1N3 Website: http://treadstonesecurity.blogspot.ca Vender Website: http://www.visualware.com/ Affected Product: MyConnection Server Affected Version: 9.7i others may also be vulnerable ABOUT: MyConnection Server MCS delivers a broad...
MyConnection Server (MCS) 9.7i Cross Site Scripting
Author: 1N3 Website: http://treadstonesecurity.blogspot.ca Vender Website: http://www.visualware.com/ Affected Product: MyConnection Server Affected Version: 9.7i others may also be vulnerable ABOUT: MyConnection Server MCS delivers a broad range of support managed automated and user initiated...
openauto 1.6.3 - Multiple Vulnerabilities
No description provided by source. Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a onclic...
Joomla Component JomSocial 1.6.288 Multiple XSS
No description provided by source. Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit works even on 1.8RC1, however it gets sanitized...
Yaws-Wiki 1.88-1 (Erlang) Stored and Reflective XSS Vulnerabilities
No description provided by source. Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki...
Profense Web Application Firewall 2.6.2 - CSRF/XSS Vulnerabilities
No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html Defenses against all OWASP Top Ten vulnerabilities Too bad it doesn't defend its...
Tickets CAD 2.20G Multiple Vulnerabilities
No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...
Windows TrackPopupMenuEx Win32k NULL Page
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 Msf::Exploit::Local Rank =...
OpenDocMan 1.2.6.5 - Persistent XSS Vulnerability
No description provided by source. Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link:...
chillycms 1.1.3 - Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content...
162,000 WordPress Sites Used in DDoS Attack
More than 162,000 “popular and clean” WordPress sites were recently used in a large-scale distributed denial of service attack DDoS that exploited the content management system’s pingback feature. While the WordPress team is aware of the issue it’s not expected to be patched as it’s a default...
Fedora 19 : rubygem-actionpack-3.2.13-5.fc19 (2014-3232)
This fixes Ruby on Rails 3.2.17 security issues : - CVE-2014-0081 - CVE-2014-0082 Includes security patches for : - CVE-2013-6417 - Incomplete fix to CVE-2013-0155 Unsafe Query Generation Risk - CVE-2013-4491 - Reflective XSS Vulnerability in Ruby on Rails - CVE-2013-6415 - XSS Vulnerability in...
Windows Meterpreter (Reflective Injection), Reverse HTTP Stager Proxy
Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Tunnel communication over HTTP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModu...
Reflective DLL Injection, Reverse HTTP Stager Proxy
Inject a DLL via a reflective loader. Tunnel communication over HTTP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 665 include Msf::Payload::Stager include Msf::Payload::Windows...
VNC Server (Reflective Injection), Reverse HTTP Stager Proxy
Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 665 include Msf::Payload::Stager include...
Windows Escalate UAC Protection Bypass (In Memory Injection)
This Metasploit module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off. This Metasploit module uses the Reflective DLL Injection technique to drop only the DLL payload binary instead of...
Oracle Demantra 12.2.1 Reflective Cross Site Scripting
Vulnerability title: Reflective XSS in Oracle Demantra CVE: CVE-2014-0371 Vendor: Oracle Product: Demantra Affected version: 12.2.1 Fixed version: 12.2.3 Reported by: Oliver Gruskovnjak Details: Reflective Cross-Site Scripting issues found in Oracle Demantra:...
