Localize: A Serious Bug on SIGNUP Process!

Hello, I found a bug on your registration/Sign UP process.. You should fix this one soon as Possible! With This bug, Attacker will able to create thousands of ID's on you application.. POC ------ it can be done in three 3 ways.. 1 By CSRF .. Copy You Registration FORM source only form code is...

Localize: XSS in Localize.io

During signup I used " as my password.Just after pressing sign up I was forwarded to a new page,where that page was showing my username and asked to click to view my password.When I clicked the javascript executed. Attachment: xss.png...

OkCupid: Xss high issue in www.okcupid.com main domain in users signup page

Xss high issue in www.okcupid.com main domain in users signup page Poc url : you can use any url below for reproduce xss issue https://www.okcupid.com/signup?nextpage=%2Fsignup%2Fpaths%2Fsplashnewinga%2F3.html4ee57alert"xss by...

Sql injection

Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...

CVE-2013-5354

Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...

CVE-2013-5354: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 fbuserid or 2 twuserid parameter to signup...

CVE-2013-4951

Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...

CVE-2013-4951

Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...

Vulnerability in Facebook discloses Primary Email Address of any account

When you sign up on Facebook, you have to enter an email address and that email address becomes your primary email address on Facebook. In a recent disclosure by a Security researcher, Stephen Sclafani - The Social Networking site Facebook was vulnerable to disclosure of primary email address of...

Sharetronix 3.0.1 Cross Site Scripting

Exploit Title : xss signup sharetronix Designed By : amir.av727 Author : Ashiyane Digital Security Team Home : http://ashiyane.org Software Link : http://sharetronix.com Security Risk : High - xss Version : sharetronix 3.0.1 Exploit : 1-site.com/signup 2 . Copy "alert/Hacked By amir.av727/ In the...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

Social Engine 4.2.5 Cross Site Scripting

Exploit for php platform in category web applications Social Engine 4.2.5 Cross Site Scripting Details: ======== 1.1 Multiple persistent input validation vulnerabilities are detected in the Social Engine v4.2.5 web application. The bug allows an attackers to implement/inject malicious script code...

eFront CMS 3.6.10 User Enumeration

TITLE ....... eFront 3.6.10 CMS user enumeration attack DATE ........ 11.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.efrontlearning.net VERSION ..... 3.6.10 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...

Bravenet Web Services Cross Site Scripting

Exploit Title: Bravenet Web Services Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: bravenet.com/ Google Dorks: inurl:calendar/day.php?usernum= or inurl: http://pub22.bravenet.com or what you want Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

SecurityTube Metasploit Framework Expert Certification Launched !

SecurityTube Metasploit Framework Expert Certification Launched ! Not so long ago, we had posted the launch of the SecurityTube Wi-Fi Security Expert SWSE program. The certification has been a success and it has students from over 25+ countries from around the world. The SecurityTube Metasploit...

MS Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. OpenVAS Vulnerability Test $Id: secpodms10-097.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Windows ICSW Remote Code Execution Vulnerability 2443105 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Microsoft Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Connection Signup Wizard Insecure DLL Loading (MS10-097; CVE-2010-3144)

The Internet Connection Signup Wizard, a component of Microsoft Windows, enables users to configure a connection on a new computer, or to use an existing Internet service account that they had on a previous computer. A remote code execution vulnerability has been reported in the way that the...

Link Protect 1.2 XSS Vulnerabilities

Exploit Title: Link Protect 1.2 XSS Vulnerabilities Date: 11-29-2010 Author: Shichemt Alen Software Link: None Version: 1.2 Platform / Tested on: Windows XP SP2 DE & Ubuntu 10.10 category: webapps/0day Dork : inurl:"sorry script'kiddies" Contact : [email protected] -...

CVE-2010-3144

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...