CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

UBUNTU-CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

Testa Online Test Management SQL Injection

Exploit Title : Testa Online Test Management Sql Injection / Login page Bypass Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://testa.cc/ Software Link Download : http://download.aftab.cc/products/testa/Testawos2.0.0.2.zip Google Dork : intitle:Testa Online Test Management...

JunOS 11.4 Cross Site Scripting

Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...

VideoSpirit Pro 1.90 Seh Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Pro Seh Buffer Overflow Version: Pro 1.90 Date found: 11.11.2013 Exploit Author: metacom Tested on:...

VideoSpirit Lite 1.77 Seh Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested o...

VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)

!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN ''' sleep3...

Wordpress WP Realty Plugin - eMail Sender Vulnerability

Exploit Title: Wordpress - wp-realty - eMail Sender Google Dork: inurl:"/wp-content/plugins/wp-realty/" Vendor: http://wprealty.org/ Date: 10/08/2013 Exploit Author: Napsterakos Link: http://localhost/wp-content/plugins/wp-realty/ Exploit:...

Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe...

FiberHome Modem Router HG-110 Authentication Bypass

Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote Change DNS Servers Example file...

FreeBSD : wordpress -- multiple vulnerabilities (043d3a78-f245-4938-9bc7-3d0d35dd94bf)

The wordpress development team reports : - Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. - Prevent a user with an Author role, using a specially crafted request, from being able to create a post 'written by' another...

WordPress WP Realty Blind SQL Injection

$$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Wordpress - wp-realty - MySQL Time Based Injection Google Dork:...

WordPress Finalist Cross Site Scripting

Exploit Title : Wordpress finalist Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content/plugins/finalist Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/10/14 Exploit : Cross site scripting Location1:...

Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities

Exploit Title: Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: September 29th 2013 Vendor notified: September 29th 2013 Vendor fixed: October 2 2013 Vendor Homepage: http://cart66.com Software Link:...

WordPress Woopra plugin remote PHP arbitrary code execution exploit.

No description provided by source. Exploit Title: woopra plugins execute arbitrary PHP code Exploit Google Dork: inurl:/plugins/woopra/inc/php-ofc-library , inurl:wp-content/plugins/woopra/inc/ Date: 06-10-2013 Exploit Author: wantexz Vendor Homepage:wordpress.org/plugins/woopra/ Software Link:...

ONO Hitron CDE-30364 Router Denial Of Service

!/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router. The Hitron Technologies CDE-30364...

WordPress SEO Watcher Remote Code Execution Vulnerability

WordPress SEO Watcher plugin remote code execution exploit. Exploit Title: seo-watcher plugins execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/seo-watcher/ inurl:wp-content/plugins/seo-watcher/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org...

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery

Hewlett-Packard HP 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert GrÄ…dek PL Software Link: download link if available Tested on: HP-E2620...