2724 matches found
Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure
Exploit for php platform in category web applications Description : Wordpress Plugins - Simple Download Button Shortcode Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/simple-download-button-shortcode/ Plugins :...
WordPress PDF And Print Button Joliprint 1.3.0 Cross Site Scripting
Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...
WordPress Plugin PDF & Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...
DEBIAN-CVE-2012-2415
Heap-based buffer overflow in chanskinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of...
Ubuntu: Security Advisory (USN-1400-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Link Up Gold CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Link Up Gold CSRF Author: Jonturk75 Category:: webapps Demo : http://demo.scripts-gate.com/LinkUpGold/administration Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-14...
PHP Form & Survey Creator CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: PHP Form & Survey Creator CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/php-form-survey-creator/29396/ Category:: webapps Demo : http://web.alumnionline.org/phpScripts/PHPFormCreator/admin/...
Ad Manager Pro Cross Site Request Forgery
Exploit Title: Ad Manager Pro CSRF Vuln add admin Author: Jonturk75 Vendor of Software Link: http://www.scripts.com/viewscript/php-text-ad-management/20881/ Category:: webapps Demo site: http://www.scripts-demo.com/admanagerpro/administration/index.php...
NWork Download Now Button Is Available But Nothing Happens?
Challenge When clicking the "Download Now" Button, you are redirected to another Veeam page or stay at the Download page. OR Cause This is due to the "Download Now" Button, by default, creates a new tab and popups the .zip file that is trying to be downloaded. Solution There are 2 solutions for...
ACPI scripts privilege escalation
invalid power button events processing, invalid umsk handling...
Acpid 1:2.0.10-1ubuntu2 Privilege Boundary Crossing Vulnerability
Exploit for linux platform in category local exploits Exploit Title: Acpid Privilege Boundary Crossing Vulnerability Google Dork: Date: 23-11-2011 Author: otr Software Link: https://launchpad.net/ubuntu/+source/acpid Version: 1:2.0.10-1ubuntu2 Tested on: Ubuntu 11.10, Ubuntu 11.04 CVE :...
Ubuntu Update for acpid USN-1296-1
Ubuntu Update for Linux kernel vulnerabilities USN-1296-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12961.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for acpid USN-1296-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : acpid vulnerabilities (USN-1296-1)
Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled power button events. A local attacker could use this to execute arbitrary code, and possibly escalate privileges. CVE-2011-2777 Helmut Grohne and Michael Biebl discovered that ACPI scripts were executed with a permissive file...
USN-1296-1: acpid vulnerabilities
Oliver-Tobias Ripka discovered that an ACPI script incorrectly handled power button events. A local attacker could use this to execute arbitrary code, and possibly escalate privileges. CVE-2011-2777 Helmut Grohne and Michael Biebl discovered that ACPI scripts were executed with a permissive file...
CVE-2010-4885
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the "official twitter tweet button for your page" tweetbutton extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4885
CVE-2010-4885 affects the TYPO3 extension XING Button (xing) , specifically versions before 1.0.2 . The vulnerability is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact is the potential execution of unauthorized scripts in the contex...
