2160 matches found
WordPress Extra User Details 0.4.2 Plugin - Privilege Escalation Exploit
Exploit for php platform in category web applications """ Exploit Title: Extra User Details Privilege Escalation Discovery Date: 2016-02-13 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://vadimk.com/ Software Link:...
Zomato: Persistent input validation mail encoding vulnerability in the "just followed you" email notification.
This vulnerability allows an attacker to add custom html/js code to emails that are then sent to other users of zomato.com. This vulnerability can be reproduced by any normal user ie. unprivileged accounts by editing their profile's "your full name" field with malicious code. This is not possible...
Profile Builder < 2.2.5 - XSS
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a XSS security vulnerability...
HackerOne: Hackerone impersonation
You should restrict users to create user profile named "hacker0x01" because it represents 'hackerone' everywhere. Any user can create a profile named "hacker0x01" although he/she is a completely different user. This way user can potentially impersonate hackerone...
Shopify: A 'Full access' administrator is able to see the shop owners user details
Description ==== A 'Full access' administrator is usually forbidden to see the shop owners user profile. But the endpoint shop.myshopify.com/admin/users.json does disclose the shop owners profile. As the user listing includes all fields of users this does leak the user details of the shop owner. ...
Error: "The specified network name is no longer available", Profile Fails to Load and user receives Temporary Profile if NTFS permissions changed on User Store
Under certain circumstances, a user profile may fail to load and the user receives a temporary profile. When this occurs an error "The specified network name is no longer available" appears in the Profile Management Log...
KeyBox - A web-based SSH console that centrally manages administrative access to systems
KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login...
Pinterest Persistent Mail Encoding Issue
Document Title: =============== Pinterest Bug Bounty 1 - Persistent contactname Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID:...
Pinterest Bug Bounty #1 - Persistent CNAME Vulnerability
Document Title: =============== Pinterest Bug Bounty 1 - Persistent CNAME Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 14...
WordPress WP Membership Plugin 1.2.3 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress WP Membership plugin Multiple Vulnerabilities Date: 2015/05/19 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://wpmembership.e-plugins.com/ Software Link:...
vBulletin 4.x.x 'visitormessage.php' Remote Code Injection Vulnerability
Exploit Title: vBulletin 4.x.x 'visitormessage.php' Remote Code Injection Vulnerability + Discovered By: Dariush Nasirpour Net.Edit0r + My Homepage: black-hg.org / nasirpour.info + Date: 2015 27 February + Vendor Homepage: vBulletin.com + Tested on: vBulletin 4.2.2 + Greeting : Ali Razmjoo -...
Moodle < 2.6 / 2.6.x < 2.6.9 / 2.7.x < 2.7.6 / 2.8.x < 2.8.4 Multiple Vulnerabilities
Binary data 8726.prm...
Slack Discloses Breach of its User Profile Database
Enterprise and small business collaboration provider Slack today disclosed that a database storing user profile information has been compromised. The company said in a notice posted on its site that the unauthorized access has been blocked, and that it has implemented two-factor authentication...
精讯cms sql注入(直接提升为管理员)
简要描述： 用户量挺大的一个cms 详细说明： 看到Lib\Action\MemberAction.class.php public function profile $this - obj - isLogin or $this - showMsgL'LOGINFIRST', Url :: getUrl'member', 'login'; if $this - isSubmit if $this - obj - edit $this - showMsgL'OPERATESUCCESS', $this - referer; else $this - showMsg$this - obj -...
Pragyan CMS 3.0 - SQL Injection
Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Advisory ID: SROEADV-2015-11 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not respond after initial communication CVE-ID: -...
Pragyan CMS 3.0 SQL Injection Vulnerability
Pragyan CMS version 3.0 suffers from a remote SQL injection vulnerability. Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not...
Pragyan CMS 3.0 - SQL Injection
Pragyan CMS 3.0 - SQL Injection Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Advisory ID: SROEADV-2015-11 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not respond after...
Microsoft Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in the Microsoft Windows User Profile Service service when verifying user privileges, which could be exploited by an attacker to cause the User...
Microsoft Windows multiple security vulnerabilities
Application Compatibility Cache privilege escalation, telnet service buffer overflow, User Profile Service privilege escalation, TS WebProxy directory traversal, Network Location Awareness Service restrictions bypass, Windows Error Reporting restrictions bypass, WebDAV driver privilege escalation...
Microsoft Windows < 8.1 (x86/x64) - User Profile Service Privilege Escalation (MS15-003)
Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create certain directories and mount the user hives as a normal user account cannot do so...