2677 matches found
Get Simple CMS 3.3.3 CSRF / XSS / Clickjacking
Affected Vendor: http://get-simple.info/ Date: 23/09/2014 Discovered by: JoeV Type of vulnerability: CSRF, Click-jacking, DOM based XSS and XSS Tested on: Windows 7 Version : 3.3.3 Description: Get Simple CMS v 3.3.3 is susceptible to multiple vulnerabilities such as CSRF, Click-jacking, DOM base...
Israeli Think-Tank Site Serves Sweet Orange Exploit
Attackers have compromised the website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA. On Friday, researchers from Cyphort reported that the site was serving the Sweet Orange exploit kit via drive-by download. At the time o...
Malware Can Bypass Chrome Extension Security Feature Easily
Researchers have uncovered a new social engineering trick that leads users to a malicious extension from Google Chrome impersonating to deliver Adobe’s Flash Player in order to lure victims in a click fraud campaign. Security experts at TrendMicro believe that the malware is triggered by opening...
Some banks take a number machine,9 0% of the pass to kill the admin backend of location-vulnerability warning-the black bar safety net
Remember that on a year to a row of the check-in card, unintentional click on the logo. Directly BUG stuck on.. Today to the Bank for something, take a number, waiting. It is the shift, few in the check-in staff. Helplessly wait-ing....... Bored on the occasion, will play under the take a number...
Malicious Advertisements Found on Java.com, Other High-Profile Sites
A New York-based online ad network company AppNexus, that provides a platform specializing in real-time online advertising, has again been spotted as the origin of a recent "malvertising" campaign that makes use of the Angler Exploit Kit to redirect visitors to malicious websites hosting the Aspr...
Java.com, TMZ Serving Malvertising Redirects to Angler Kit
Online ad network AppNexus has again been identified at the core of another malvertising campaign using the Angler Exploit Kit to redirect visitors to sites hosting the Asprox malware. Busy, popular websites including TMZ, Photobucket and Java.com in recent days have been serving malicious...
EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting (XSS)
The ezpz-one-click-backup WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
EZPZ One Click Backup <= 12.03.10 - Unauthenticated Command Execution
The ezpz-one-click-backup WordPress plugin was affected by an Unauthenticated Command Execution security vulnerability...
'Real Footage of Malaysian Flight MH 17 Shot Down' Facebook Spam Spreads Malware
A distasteful trend among the cyber crooks have began these days that they left no occasion, either good or bad, to snatch users’ financial information in order to make money as well as spread malware to victimize users. The tragedy of the crashed Malaysia Airlines flight MH17 is no exception for...
bitrix site manager 4.0.5 - Remote File Inclusion Vulnerability
No description provided by source. + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just...
Click&BaneX Details.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26493/info Click&BaneX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Java CMM Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...
Fast Click SQL Lite 1.1.2/1.1.3 Show.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17819/info Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an...
click&rank (sql/xss) Multiple Vulnerabilities
No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Click&Rank download : null Demo : http://www.icash.ch/index.html?ClickAndRank/default.asp Exploit...
Click Gallery Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21311/info Click Gallery is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data...
Click N Print Coupons <= 2006.01 - (key) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Click N' Print Coupons = V2005.01 key Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.websitedesignsforless.com $$ : $9.95 Message : Tum Musluman Aleminin Kurban Bayrami Mubarek Olsun .. .....
phpwcms <= 1.5.4.6 "preg_replace" - Multiple Vulnerabilities
No description provided by source. ?php / phpwcms = v1.5.4.6 pregreplace remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite some time now. Here I...
Fast Click (<= 1.1.3 , <= 2.3.8) (show.php) Remote File Inclusion Exploit
No description provided by source...
Click&Email (Auth Bypass) SQL Injection Vulnerability
No description provided by source. Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch...
Java Applet Driver Manager Privileged toString() Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...