CVE-2017-1000235

I, Librarian version =4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised...

skyhawkrugs.com XSS vulnerability

Vulnerable URL: http://skyhawkrugs.com/rugs.asp?collection=1"...

CVE-2017-6670

CVE-2017-6670 affects Cisco Unified Communications Domain Manager (CUCM) web-based GUI. The issue is an Open Redirect vulnerability caused by improper input validation of HTTP request parameters, allowing an unauthenticated, remote attacker to redirect users to a malicious web page. Affected rele...

Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability

Document Title: =============== Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1845 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================...

OnionScan - Onion Services Security Scan

The purpose of this tool is to make you a better onion service provider. You owe it to yourself and your users to ensure that attackers cannot easily exploit and deanonymize. Go Dependencies h12.me/socks - For the Tor SOCKS Proxy connection. github.com/xiam/exif - For EXIF data extraction...

shop.rostex.ua Open Redirect vulnerability

Vulnerable URL: http://shop.rostex.ua/setlang?lang=en=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0...

phpFileManager 0.9.8 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

ALCASAR-Remote

By sending a specially crafted value in the "host" HTTP header, it is possible to inject the exec function in order to execute commands as Apache user. !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8 Remote Root Code Execution Vulnerability Author: eF Date : 2014-02-10 db 88 ,ad8888ba, db...

Heeroa /info/infoshowaction.do 任意文件下载漏洞

No description provided by source...

iStArtApp FileXChange 6.2 Command Injection / LFI / File Upload

Document Title: =============== iStArtApp FileXChange v6.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1237 Release Date: ============= 2014-03-26 Vulnerability Laboratory ID VL-ID:...

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download ...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Nov 2013) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Trellis Desk CSRF Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Social Book Facebook Clone Script Cross Site Scripting

Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...

CVE-2011-0509

Cross-site scripting XSS vulnerability in Vaadin before 6.4.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the index page...

Fedora Update for firefox FEDORA-2010-1727

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2010-1727 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SkaLinks 1.5 (register.php) Remote Arbitrary Add Editor Vulnerability

Exploit for unknown platform in category web applications...

Unfixed XSS vulnerability at rock.geosociety.org

Security researcher MaXWeL, has submitted on 16/05/2007 a cross-site-scripting XSS vulnerability affecting rock.geosociety.org, which at the time of submission ranked 348708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/05/2007. It is...

CVE-2007-0137

CVE-2007-0137 describes a cross-site scripting (XSS) vulnerability in Serene Bach components from SerendipityNZ: specifically SimpleBoxes/Serene Bach 2.05R and earlier and 2.08D and earlier in the 2.08 series, as well as sb 1.13D and earlier and 1.18R and earlier in the 1.18 series. The flaw allo...

eabweb.txt

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...