CVE-2014-6787: Undefined Security Weakness

The Counter Intuition aka com.counter.intuition application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Wordpress Like Dislike Counter 1.2.3 /wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/ajax_counter.php SQL注入漏洞

No description provided by source...

Wordpress Like Dislike Counter 1.2.3 Plugin - SQL Injection Vulnerability

一、插件介绍 是一个支持文章、页面和评论投票顶踩的插件，你可以将顶踩放在文章、页面评论的任意位置，还可以放在网站首页上。如果你有一定代码修改能里的话，可以将本插件集成到主题里。 二、漏洞概述 Like Dislike Counter 1.2.3及其他版本存在多个SQL注入漏洞，成功利用后可使攻击者执行未授权数据库操作。 三、漏洞描述 Like Dislike Counter 插件SQL注入漏洞存在于ajaxcounter.php文件中，主要原因是未对POST数据中的postid进行有效过滤，致使非法数据被数据库正常解析执行。 四、漏洞分析...

WordPress Rich Counter 1.1.5 Cross Site Scripting

Title : Wordpress Rich Counter 1.1.5 Plugin - Cross Site Scripting Risk : Normal Exploit Author : XroGuE Google Dork : inurl:wp-content/plugins/rich-counter/ Plugin Version : 1.1.5 Plugin Name : Rich Counter Plugin Download Link : http://downloads.wordpress.org/plugin/rich-counter.zip Vendor Home...

WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection

WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND...

WordPress Like Dislike Counter Plugin 1.2.3 - SQL Injection

This WordPress Like Dislike Counter plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Like Dislike Counter 1.2.3 SQL Injection

Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND plugins/pro-like-dislike-counter/ldc-ajax-counter.php Plugin Version : 1.2.3...

Cimy Counter - Vulnerabilities

The Cimy Counter WordPress plugin was affected by a Vulnerabilities security vulnerability...

Thank You Counter Button <= 1.8.2 - Cross-Site Scripting (XSS)

The Thank You Counter Button WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Counter Strike Portals 'download' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27747/info Counter Strike Portals is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

WordPress Cimy Counter - Vulnerabilities

No description provided by source. ---------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://sebug.net/exploit/19862/ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions...

Half-Life CSTRIKE Server 1.6 - Denial of Service Exploit (no-steam)

No description provided by source. ---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / /...

Counter Strike 2D <= 0.1.0.1 - Denial of Service Vulnerability

No description provided by source. / Counter Strike 2D DoS Affected versions: 0.1.0.1 and prior CS2D Developer: http://www.cs2d.com/ by Iman Karim [email protected] http://home.inf.fh-rhein-sieg.de/ikarim2s/ Written in Borland C++ Builder 6 20.09.2005 / include winsock.h...

George Burgyan CGI Counter 4.0.2/4.0.7 Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1202/info Due to unchecked code that handles user input in George Burgyan's CGI Counter, remote execution of arbitrary commands at the same privilege level as the web server it is running on is possible. Examples:...

MobPartner Counter - Remote File Upload Vulnerability

No description provided by source. MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : MobPartner Counter upload files The exploit : http://localhost/path/upload.php edit shell...

Complete PHP Counter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15111/info Complete PHP Counter is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability

No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:read.php?datespan= Vulnerability: 1. SQL Injection 1.1...

chCounter indirect SQL Injection and XSS Vulnerabilities

No description provided by source. Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities Date: 29.04.2010 Author: Valentin Category: webapps/0day Version: 3.1.1 Tested on: Debian, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Counter Strike Source ManiAdminPlugin 2.0 - Remote Crash Exploit

No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@ Counter strike source @@@@@ @@@@@ Mani Admin Plugin Exploit v2 @@@@@ @@@@@ M4rt1n. www.hackerzbay.com @@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ alias aspam...

PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie)

No description provided by source. $Id: phpunserializezvalcookie.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...