906 matches found
CVE-2014-2080: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter...
Facebook domain hacked by Syrian Electronic Army
On the 10th Anniversary of Social networking website Facebook, the hacker group 'Syrian Electronic Army' claimed that they managed to hack into the administrator account of the Facebook's Domain Registrar - MarkMonitor. The hacking group changed the Facebook Domain's contact information to a Syri...
Security and policy surrounding bring your own devices (BYOD)
As the proliferation of devices continues to capture the imagination of consumers, and has ignited what is referred to as bring your own device BYOD revolution, many IT departments across the globe are now facing increased security considerations. While organizations encourage BYOD for cost savin...
Exclusive : Google Palestine domain hacked and defaced
Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...
Security Bypass and Remote Execution
Product: MODX Revolution Severity: Extremely Critical Versions: 2.1.0–2.2.7 Vulnerability type: Security Bypass Report date: 2013-Jun-4 Fixed date: 2013-Jun-4 Description Two vulnerabilities were discovered in MODX that allow users to bypass security. Attackers could exploit this to remotely...
New vulnerabilities in MODx Revolution
Hello 3APA3A! I want to warn you about two new vulnerabilities in MODx Revolution. This is addition to previous publication about vulnerabilities in MODx Revolution http://securityvulns.ru/docs28923.html. These are Abuse of Functionality vulnerabilities in MODx related to earlier mentioned Brute...
BF, CSRF, AoF and IAA vulnerabilities in MODx Revolution
Hello 3APA3A! I want to warn you about multiple vulnerabilities in MODx Revolution. These are Brute Force, Cross-Site Request Forgery, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in MODx. It's about 2.x Revolution versions of MODx. In 0.x and 1.x Evolution versions of...
2Point Solutions XSS / SQL Injection / Local File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...
Broadcom DoS on BCM4325 and BCM4329 devices
1. Advisory Information Title: Broadcom DoS on BCM4325 and BCM4329 devices Advisory ID: CORE-2012-0718 Advisory URL: http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 Date published: 2012-10-23 Date of last update: 2012-10-23 Vendors contacted: Broadcom Corporation...
We Are Being Held in Cyber Handcuffs
Hello my Princes of Peace, Warriors of the Revolution, Princesses of the cause, I want you to take two minutes and watch this video: This video is the epitome of the ignorance and arrogance of governments all over the world in response to our cyber war revolution. As you will see, the power peopl...
Directory traversal
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter. NOTE: some of these details are obtaine...
CVE-2010-5278
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter. NOTE: some of these details are obtaine...
CVE-2010-5278
MODx Revolution 2.0.2-pl (and possibly earlier) is vulnerable to a Local File Inclusion via the class_key parameter in manager/controllers/default/resource/tvs.php when magic_quotes_gpc is disabled. The vulnerability allows an attacker to read arbitrary server files by使用 a directory traversal seq...
CVE-2010-5278
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter. NOTE: some of these details are obtaine...
CVE-2010-5278: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter. NOTE: some of these details are obtaine...
MODX Website Compromise Update: Revolution Still Safe
MODX Revolution is Still Safe After exhaustive investigation, at this point we have determined the recent modx.com security breach used custom code authored specifically for our website. It was not a result of code contained in any core releases of MODX Revolution. While we have taken additional...
RevolutionTechnologies SQL Injection
1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0 x Official Website: http://www.1337day.com 1 1 x...
MODx Revolution 2.0.2-pl LFI
Local file include vulnerability in MODx classkey parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Inet Revolution SQL Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Exploit Title: Inet Revolution http://gyankalash.com/pages.php?q=14' - http://stvishnaschool.com/pages.php?q=4' - http://concordsecurity.org/service.php?id=4' - Admin Pag...