Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the 1 User Agent or 2 Connection variable...

Clipbucket 2.5 Blind SQL Injection

Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia Management Script Provided Free to th...

PT-2012-5498

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager EMM. These vulnerabilitie...

CVE-2012-4590: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the 1 User Agent or 2 Connection variable...

PT-2012-5291

Name of the Vulnerable Software and Affected Versions Better WP Security plugin versions prior to 3.2.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the HTTP USER AGENT header. Recommendations For versions prior to 3.2.5...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

WordPress Plugin Mz-jajak 2.1 - SQL Injection Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d0...

Kamads Classifieds 2.0 - Admin Hash Disclosure

Kamads Classifieds 2.0 - Admin Hash Disclosure \n"; print "\nex...........: php $argv0 http://www.target.com/V2AXHTML/admin/admin.php\n"; die; else $ch = curlinit; curlsetopt$ch,CURLOPTURL,"$argv1"; $op1 = curlsetopt$ch,CURLOPTRETURNTRANSFER,true; curlsetopt$ch,CURLOPTUSERAGENT,"Mozilla/4.0...

europ INNET Web Studio Administration Program 2.0 XSS / CSRF / LFI

====================================================== Vulnerable software: Administration Programm v 2.0 Vendor: europ INNET Web Studio, www.europ-innet.com ====================================================== Vulnerabilities: //insertguestbook.php ==============VULNERABLE CODE...

sip-call-spoof NSE Script

Spoofs a call to a SIP phone and detects the action taken by the target busy, declined, hung up, etc. This works by sending a fake sip invite request to the target phone and checking the responses. A response with status code 180 means that the phone is ringing. The script waits for the next...

sflog! 1.00 - Multiple Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-05 sflog! // 1 ..cut.. 53 requireonce"./includes/entries.inc.php"; // 4 ..cut.. File: ./sflog/includes/pageHeader.inc.ph...

PT-2012-1269

Name of the Vulnerable Software and Affected Versions Wyse Device Manager versions 4.7.x Description The issue concerns multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via the User-Agent HTTP header to hserver.dll or through unspecified input ...

CVE-2009-0693: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Wyse Device Manager WDM 4.7.x allow remote attackers to execute arbitrary code via 1 the User-Agent HTTP header to hserver.dll or 2 unspecified input to hagent.exe...

CVE-2012-2633

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2012-2633

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

PT-2012-4145

Name of the Vulnerable Software and Affected Versions WassUp plugin versions prior to 1.8.3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which can lead to cross-site scripting XSS attacks. Recommendations For versions prior...

CVE-2012-2633: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Microsoft Windows OLE Object File Handling Remote Code Execution(CVE-2011-3400)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Feifei television systems PHP version v1. 9 injection exploit-vulnerability warning-the black bar safety net

Article author: honglousy Yesterday the whole hacking Forum next station on the program, found that people also really many. Simply write the exp. Boring as... ? php / Fly fly video management system SQL injection Feifei television systems PHP version v1. 9 injection exploit by:www.08sec.com fans...