ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow

====================================================================== Secunia Research 09/02/2010 - Microsoft PowerPoint File Path Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Window Snyder

Window occupies an entirely unique place in the security community. Sure, being a woman in the security community is rare enough. But she also commands a lot of respect in this ultra-competitive world, having helped develop Microsoft’s threat modeling process, worked as a security architect at...

Opera 10.10 Remote Code Execution DoS Exploit

No description provided by source. !/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an...

Opera Denial Of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

Google Attack Was Tip of the Iceberg

The recent disclosure by Google, Adobe and other companies that their networks had been thoroughly compromised by attackers who may have been after their source code has prompted a tremendous amount of discourse both in the security community and in the general public about the political and...

Opera 10.10 - Remote Code Execution Denial of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...

S.O.M.P.L. Player 1.0 Buffer Overflow

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

DataLife Engine 8.3 Remote File Inclusion

======================================================================================== | Title : DataLife Engine 8.3 RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

VaroCMS Community Voting Web 2.0 XSS

Exploit Title: VaroCMS: Community Voting Web2.0 CMS XSS & Open Redirection Date: 22/12/2009 Author: cp77fk4r | Empty0pagEShift+2gmail.com Version: VaroCMS: Community Voting Web2.0 CMS Cross Site Scripting http://www.varocms.com/demo/search?q=XSS Open Redirection...

XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)

XSS Vulnerability in Drupal's Node Blocks contributed module 6.x-1.3 and 5.x-1.1 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily publish,...

Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net

Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...

HLstatsX Community Edition 1.6.5 SQL Injection

HLstatsX Community Edition 1.6.5 SQL Injection Vulnerability Plugin Home: http://www.hlxcommunity.com/ Author: Babora Site: www.1923turk.com Google Dork: "hlstats.php?mode=" Exploit: xxxxx.com/xxx/hlstats.php?mode=dailyawardinfo&award==SQL-inj...

AWCM 2.1 Backup Vulnerability

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/downpro.php?id=30 Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

HLstatsX Community Edition 1.6.5 Cross Site Scripting

------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ DESCRIPTION: HLstatsX Community Edition suffers from a XSS vulnerability. PoC:...

Skype for Linux <= 2.1 Beta multiple strange behavior

Exploit for unknown platform in category remote exploits ==================================================== Skype for Linux = 2.1 Beta multiple strange behavior ==================================================== Title: Skype for Linux =2.1 Beta multiple strange behavior CVE-ID: OSVDB-ID:...

Smart Vision Script News SQL Injection

============================================ | Smart Vision Script News newsdetail SQL Injection Vulnerability ============================================ + Author: Err0R + Site : www.sa-hacker.com/vb + Email : [email protected] ===================================== dork : Come from home Script...

HLstatsX Community Edition 1.6.5 - Cross-Site Scripting

Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability Date: January 1st, 2010 Author: Sora Version: 1.6.5 and lower versions Tested on: Windows Vista ------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability Author: Sora Contact: vhr95zw at hotma...

HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =================================================================== HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability =================================================================== Exploit Title: HLstatsX Community...