"$referer" export lead to the cross-site flaws in all versions of Discuz!

hi; All versions of Discuz! have the cross-site vulnerabilities because of the export value of "$referer". Like: Discuz! 7.X Discuz! 6.X Discuz! 5.X Discuz!NT 3.X and so on. There are some htm pages in all versions of Discuz!, that are: /templates/default/attachpay.htm /templates/default/ecrate.h...

MiTM Attacks Can Help Steal Data from SaaS

Researchers from Indiana University and Microsoft were able to infer sensitive data by analyzing the distinct size and other attributes of each exchange between a user and a website interaction. Using man-in-the-middle attacks, they could glean the information even when transactions were encrypte...

Options for Local Security Checks

This script allows users to set some Options for Local Security Checks which are stored in the knowledge base and used by other tests. Description of the options: - Also use SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

PHP Apps Links Insecure Cookie Handling

Exploit Title: PHP Apps Links Insecure Cookie Handling Vulnerability‏ Date: 15.09.2009 Author: JIKO Software Link: http://www.mixarab.com/scripts/links.zip Version: app version Tested on: relevant os CVE : if exists Code : ----------exploit Debut Insecure Cookie Handling Vulnerability ----------M...

LDAP - Injection

Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...

LDAP - Injection

LDAP - Injection + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano,...

Rogue iPhone Apps Explored at Black Hat

Lax security screening at Apple’s App Store and a design flaw are putting iPhone users at risk of downloading malicious apps that could steal data and spy on them, a Swiss researcher warns at Black Hat DC. Read the full article. cnet...

Google Apps googleapps.url.mailto URI Argument Injection

Google Apps is a set of web-based tools hosted by Google under the software-as-a-service model. It features several Web applications with similar functionality to popular office suites, including: Gmail, Google Calendar, Google Chrome, Talk, Docs and Sites. When using Google Apps, the data and...

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Facebook Vulnerable to Clickjacking Attacks

Facebook is susceptible to certain types of attacks that could allow someone to hijack an account while a user is interacting with another Web site, a security researcher warned on Monday. Reseacher Nitesh Dhanjani also said a design flaw in Facebook is granting third-party apps permission to...

Blaze Apps Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Blaze Apps 1.x - SQL Injection HTML Injection

Blaze Apps 1.x - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/40212/info Blaze Apps is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the...

Blaze Apps 1.x - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/40212/info Blaze Apps is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code i...

phpwind 7.5 apps/groups/index.php远程包含漏洞

apps/groups/index.php 里$route和$basePath变量没有初始化,导致远程包含或者本地包含php文件,导致执行任意php代码 ?php if $route == "groups" requireonce $basePath . '/action/mgroups.php'; elseif $route == "group" requireonce $basePath . '/action/mgroup.php'; elseif $route == "galbum" requireonce $basePath . '/action/mgalbum.php';...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...

Gentoo Security Advisory GLSA 200911-04 (dstat)

The remote host is missing updates announced in advisory GLSA 200911-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

iPhone Worm Circulating in the Wild

A simple, yet effective, worm is now circulating on some jailbroken iPhones, changing settings on the phones and terminating some services. The worm, which was discovered Sunday, doesn’t appear to be too malicious, but is an indicator of what might lie ahead for owners of iPhones and other...

Scareware Locks Apps on Infected PCs

USA Today is reporting on a new variant of scareware that not only inundates users with exhortations to purchase phony antivirus software called “Total Security 2009,” but that also locks users out of nearly all applications until they purchase the disreputable product. Once their PCs are infecte...

PT-2009-2790 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.0 SP3 through 2.0 SP1 Description: The issue allows remote attackers to obtain unintended access to stack memory and execute arbitrary code via crafted applications, including XAML browser applications,...

Google Apps googleapps.url.mailto handler command injection

Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...