926 matches found
PT-2013-3999
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.71 Description The issue arises from improper determination of the circumstances under which a renderer process can be considered a trusted process for sign-in and subsequent sync operations. This make...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some since fixed server-side bugs. 252216 Low CVE-2013-2867: Block pop-unders in various scenarios. 252062 High CVE-2013-2879: Confusion setting up sign-in and...
Stable Update for Chrome OS
The Stable channel has been updated to 23.0.1271.94 Platform version: 2913.224.0 for all Chrome OS Devices. This build contains a number of new features, bug fixes and security improvements. Machines will be receiving updates over the next several days. Release Highlights: Updated default apps...
Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Execution
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
WysGui 2.3 Multiple Vulnerabilities
Exploit for php platform in category web applications =================================== WysGui 2.3 Multiple Vulnerabilities =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...
FlashChat v 4.7.8 script sign in admin Exploit
Exploit for php platform in category web applications ============================================== FlashChat v 4.7.8 script sign in admin Exploit ============================================== Title: script FlashChat v 4.7.8 remote sign in admin Exploit Author: Mr.MLL Published: 2010-04-15...
ReVou Micro Blogging Cross Site Scripting
--------------------------------------- ReVou Micro Blogging Cross Site Scripting --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : ReVou Micro Blogging How To Do It : 1- Sign up 2- Sing in 3-...
CVE-2008-6306
Cross-site scripting XSS vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2009-1304 · Web Scribble Solutions · Webclassifieds
Name of the Vulnerable Software and Affected Versions: Web Scribble Solutions webClassifieds 2005 Description: The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password...
Naymz multiple XSS
Naymz is a online profile system with positive and accurate information that you want others to find when they search for you online. Community Search fails to sanitize: 1."scriptalert'xss'/script...
Unfixed XSS vulnerability at www.lmwebhosting.net
Security researcher Thefucker, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.lmwebhosting.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...
Unfixed XSS vulnerability at cokisimizvar.com
Security researcher Security-TR, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting cokisimizvar.com, which at the time of submission ranked 451349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...
Unfixed XSS vulnerability at host.dataislem.com
Security researcher Thefucker, has submitted on 08/04/2007 a cross-site-scripting XSS vulnerability affecting host.dataislem.com, which at the time of submission ranked 996699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/04/2007. It is...
Sql injection
SQL injection vulnerability in signin.aspx in WebStore Online Store Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
CVE-2007-4108
SQL injection vulnerability in signin.aspx in WebEvents Online Event Registration Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
CVE-2007-4109
SQL injection vulnerability in signin.aspx in WebStore Online Store Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
webstore-sql.txt
A R I A - S E C U R I T Y WebStore - Online Store Application Template SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...
CVE-2002-0673: Undefined Security Weakness
The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...
