MyBB Extended Useradmininfo Plugin 1.2.1 - Cross-Site Scripting

Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site Scripting Google Dork: N/A Date: 09.02.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage: http://forum.mybboard.de/user-9022.html Software Link: http://mods.mybb.com/view/extended-useradmininfo...

大汉版通JIS统一身份认证系统源码某处的信息泄漏可能影响大部分JIS

简要描述： 有点奇葩但是已经遇到过两次的漏洞。不过不要因为我分类选了“信息泄漏”就觉得这个只是小漏洞……其实这货可能影响大了呢！而且里面的利用可以结合之前我提交的JIS的漏洞综合来利用，还是有点意思的 详细说明： 2.2.1版本的JIS中某个文件包含了JIS相关邮件找回密码的邮箱信息！包含邮箱用户名和邮箱密码！也就是说，有一部分版本的JIS，找回用户密码的功能所发出的邮件，都是利用该邮箱发出的！到底有什么危害？下面继续看 漏洞证明： jis\check\findpwd\oprvalidate.jsp String sender =new...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

Starbucks Patches Vulnerable iOS App

Starbucks has patched a vulnerability in its iOS app that was found last week spilling user data, including usernames and passwords, by adding what it’s called an “additional safeguard measure” to protect its customers. While it’s a relatively quick turnaround for the company – it only took about...

Starbucks Mobile App Vulnerability Puts Data At Risk

A vulnerability in Starbucks’ mobile app could be putting coffee drinkers’ information–including their usernames, email addresses and passwords–at risk. The problem stems from the way session.clslog, the Crashlytics log file, handles those credentials in the event of a crash. Within the file ther...

Stanford Researchers Find Connecting Metadata With User Names is Simple

One of the key tenets of the argument that the National Security Agency and some lawmakers have constructed to justify the agency’s collection of phone metadata is that the information it’s collecting, such as phone numbers and length of call, can’t be tied to the callers’ names. However, some...

大汉通版jis统一身份认证系统漏洞打包

简要描述： 大汉通版jis统一身份认证系统漏洞打包，政府部门使用居多 详细说明： 大汉通版jis统一身份认证系统: 在用户修改信息时进行抓包发现 POST: http://10.11.5.201:9080/jis/front/upduserdo.jsp CONTENT:...

phpcms2008 preview.php injection EXP-vulnerability warning-the black bar safety net

phpcms2008 description Phpcms2008 is a paragraph based on PHP+Mysql architecture of the web content management system, it is an open-source PHP development platform. Phpcms uses a modular approach to the development, functional and easy to use to facilitate the expansion, for medium to large site...

XDCMS某处平衡权限漏洞可泄漏用户信息

简要描述： XDCMS订餐系统最新版，官方演示站某处平衡权限。 详细说明： XDCMS订餐系统最新版，官方演示站某处平衡权限。 可以查看任意用户订单，包括订单密码等用户敏感信息。 这是用户333333的订单260的信息： 然后登陆另一个用户444444，此用户名可以查看用户333333的订单信息： 再来看看444444用户看到的222号id的订单信息： 由于用户没有控制用户之间的权限问题，导致平衡权限，造成订单遍历。 由于没有刚放演示站的最新版代码，此处不做代码分析。 问题应该出在\system\modules\company\order.php的show函数处。 漏洞证明： 见详细信息...

Cupid Media Hacked, Plaintext Passwords Stolen

Hackers reportedly breached servers in January belonging to Cupid Media, a niche dating service with 30 million users, stealing more than 42 million unencrypted passwords and various other sensitive data. Cupid Media operates a variety of niche dating sites based on ethnicity, religion, physical...

Zikula CMS v1.3.5 - Multiple Web Vulnerabilities

Document Title: =============== Zikula CMS v1.3.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1114 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 1114 Comm...

Woltlab Burning Board FLVideo Addon SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVideo Addon for WB...

MGASA-2013-0262 Updated nagstamon package fixes security vulnerability

A user details information exposure flaw was found in the way Nagstamon performed automated requests to get information about available updates. Remote attackers could use this flaw to obtain user credentials for servers monitored by the desktop status monitor due to their improper base64...

[LinEnum] Scripted Local Linux Enumeration & Privilege Escalation Checks

High-level summary of the checks/tasks performed by LinEnum: Kernel and distribution release details System Information: Hostname Networking details: Current IP Default route details DNS server information User Information: Current user details Last logged on users List all users including uid/gi...

docomo overseas usage application vulnerability in the connection process

Overview docomo overseas usage application provided by NTT DOCOMO contains a vulnerability within the process of connecting to Wi-Fi access points, which may lead to user information being sent unintentionally. Impact When connecting to a Wi-Fi access point, an attacker may obtain user informatio...

JVN#44035194: docomo overseas usage application vulnerability in the connection process

docomo overseas usage application provided by NTT DOCOMO contains a vulnerability within the process of connecting to Wi-Fi access points, which may lead to user information being sent unintentionally. Impact When connecting to a Wi-Fi access point, an attacker may obtain user information. Soluti...

JavaScript and Timing Attacks Used to Steal Browser Data

LAS VEGAS–Security researchers have been warning about the weaknesses and issues with JavaScript and iframes for years now, but the problem goes far deeper than even many of them thought. A researcher in the U.K. has developed a new technique that uses a combination of JavaScript-based timing...

Ubuntu Forums Password Breach Exposes 1.8 Million Users

Every username, password and email address used by members of the Ubuntu Forums was accessed in a breach reported on Saturday by the free Linux distribution. More than 1.82 million accounts stored in the forums’ database were stolen, according to a notice posted on the forums’ home page Saturday...

Brute Force Attack on Club Nintendo Yields Info on 25K

Hackers executed a coordinated attack, hitting servers belonging to the popular gaming company Nintendo hard for nearly a month, resulting in the breach of information of nearly 25,000 gamers. The brute-force attack targeted Club Nintendo, a fan/membership site run by the Kyoto-based company. Fro...

JSON-RPC API functions available anonymously even though anonymous API access is disabled.

The summary says it all really. The functions listed below can be used on our confluence service even though we have Anonymous API Access disabled check box not checked in admin control panel. This is an issue when it comes to confluence sites that have sensitive user or group information...