235 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to 1 400.php, 2 403.php, or 3 403.php...
CVE-2013-3487
BulletProof Security WordPress plugin (Security Log): multiple XSS in the security log via HTML header fields to 400.php/403.php in versions before 0.49. Root cause appears to be improper input handling. Remediation: update to a fixed release (0.49 or newer) per PatchStack and related advisories;...
CVE-2013-3487
Multiple cross-site scripting XSS vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to 1 400.php, 2 403.php, or 3 403.php...
CVE-2013-3487: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to 1 400.php, 2 403.php, or 3 403.php...
WordPress BulletProof Security Plugin <= 0.48.9 - Multiple XSS
Because of these vulnerabilities in the security log, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Windows Gather BulletProof FTP Client Saved Password Extraction
This module extracts information from BulletProof FTP Bookmarks files and store retrieved credentials in the database. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather BulletProof...
CVE-2012-4268
Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...
Cross site scripting
Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...
CVE-2012-4268
CVE-2012-4268 describes a cross-site scripting (XSS) vulnerability in the BulletProof Security WordPress plugin. The flaw resides in bulletproof-security/admin/options.php and affects versions before .47.1, allowing remote attackers to inject arbitrary script/HTML via the HTTP_ACCEPT_ENCODING hea...
CVE-2012-4268
Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...
WordPress BulletProof Security Plugin <= .47.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the HTTPACCEPTENCODING header. Solution Update the plugin...
CVE-2012-4268: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPACCEPTENCODING header...
BulletProof FTP Client 2010 - Buffer Overflow Vulnerability
Exploit for windows platform in category dos / poc Title: ====== BulletProof FTP Client 2010 - Buffer Overflow Vulnerability Introduction: ============= BPFTP Client is a fully automated FTP client, with many advanced features including automatic download resuming, leech mode, ftp search and much...
Attackers Using Amazon Cloud to Host Malware
Attackers are beginning to host their malicious domains and drive-by download sites, and most recently researchers have discovered a number of domains on Amazon’s cloud platform that are being used to install malware as part of a spam and phishing campaign designed to steal banking credentials an...
Bulletproof FTP client buffer overflow
Buffer overflow on .bps files parsing...
BulletProof FTP Client Buffer Overflow (SEH)
/ BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200 ESI 00000000 EDI 00000000 EIP...
BulletProof FTP Client 2.63 b56 - '.bps' File Stack Buffer Overflow
/ BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200 ESI 00000000 EDI 00000000 EIP...
BulletProof FTP 2.63 b56 Client Malformed '.bps' File Stack Buffer Overflow
No description provided by source. / BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200...
Google: Cooperation Needed to Combat Malicious Ads
GENEVA — A more comprehensive and serious level of cooperation among industry leaders is needed to help stop the scourge of malicious Web ads and botnets that result from the infected PCs, a top Google executive said Wednesday. Eric Davis, the head of anti-malvertising at Google, speaking to a...
BulletProof FTP Client 2009 Overflow
!/usr/bin/python Bug : BulletProof FTP Client 2009 .bps Buffer Overflow Exploit SEH Credits : Stack Tested on : Xp sp2 fr Exploited by : His0k4 Greetings : All friends & muslims HaCkErs DZ,snakespc.com,secdz.com Chi3arona houa : Serra7 merra7,koulchi mderra7 :D translate by Cyb3r-1st: esse7 embe7...