1122 matches found
OkCupid: Xss high issue in www.okcupid.com main domain in users signup page
Xss high issue in www.okcupid.com main domain in users signup page Poc url : you can use any url below for reproduce xss issue https://www.okcupid.com/signup?nextpage=%2Fsignup%2Fpaths%2Fsplashnewinga%2F3.html4ee57alert"xss by...
Sql injection
Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...
CVE-2013-5354
Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...
CVE-2013-4951
Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...
CVE-2013-4951
Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...
Vulnerability in Facebook discloses Primary Email Address of any account
When you sign up on Facebook, you have to enter an email address and that email address becomes your primary email address on Facebook. In a recent disclosure by a Security researcher, Stephen Sclafani - The Social Networking site Facebook was vulnerable to disclosure of primary email address of...
Sharetronix 3.0.1 Cross Site Scripting
Exploit Title : xss signup sharetronix Designed By : amir.av727 Author : Ashiyane Digital Security Team Home : http://ashiyane.org Software Link : http://sharetronix.com Security Risk : High - xss Version : sharetronix 3.0.1 Exploit : 1-site.com/signup 2 . Copy "alert/Hacked By amir.av727/ In the...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
Social Engine 4.2.5 Cross Site Scripting
Exploit for php platform in category web applications Social Engine 4.2.5 Cross Site Scripting Details: ======== 1.1 Multiple persistent input validation vulnerabilities are detected in the Social Engine v4.2.5 web application. The bug allows an attackers to implement/inject malicious script code...
eFront CMS 3.6.10 User Enumeration
TITLE ....... eFront 3.6.10 CMS user enumeration attack DATE ........ 11.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.efrontlearning.net VERSION ..... 3.6.10 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...
Bravenet Web Services Cross Site Scripting
Exploit Title: Bravenet Web Services Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: bravenet.com/ Google Dorks: inurl:calendar/day.php?usernum= or inurl: http://pub22.bravenet.com or what you want Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...
SecurityTube Metasploit Framework Expert Certification Launched !
SecurityTube Metasploit Framework Expert Certification Launched ! Not so long ago, we had posted the launch of the SecurityTube Wi-Fi Security Expert SWSE program. The certification has been a success and it has students from over 25+ countries from around the world. The SecurityTube Metasploit...
MS Windows ICSW Remote Code Execution Vulnerability (2443105)
This host is missing a critical security update according to Microsoft Bulletin MS10-097. OpenVAS Vulnerability Test $Id: secpodms10-097.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Windows ICSW Remote Code Execution Vulnerability 2443105 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...
Microsoft Windows ICSW Remote Code Execution Vulnerability (2443105)
This host is missing a critical security update according to Microsoft Bulletin MS10-097. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Internet Connection Signup Wizard Insecure DLL Loading (MS10-097; CVE-2010-3144)
The Internet Connection Signup Wizard, a component of Microsoft Windows, enables users to configure a connection on a new computer, or to use an existing Internet service account that they had on a previous computer. A remote code execution vulnerability has been reported in the way that the...
Link Protect 1.2 XSS Vulnerabilities
Exploit Title: Link Protect 1.2 XSS Vulnerabilities Date: 11-29-2010 Author: Shichemt Alen Software Link: None Version: 1.2 Platform / Tested on: Windows XP SP2 DE & Ubuntu 10.10 category: webapps/0day Dork : inurl:"sorry script'kiddies" Contact : [email protected] -...
CVE-2010-3144
Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...
Design/Logic Flaw
Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...
CVE-2010-3144
CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...
Microsoft Internet Connection Signup Wizard DLL Hijacking Exploit
Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora Site : www.BeenuArora.com / Exploit Title: Microsoft Internet Connection Signup Wizard DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .isp Compile and rena...