CVE-2014-9041

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks...

Vimeo: CSRF bypass

Dear Team, Once again i'm here. During research of vimeo.com I found that you are using anti-csrf token against csrf attack. but it's not going to validate on server side. let's see Step 1: go to https://vimeo.com/forgotpassword Step 2: write your email and click on help me. Step 3: Now before...

Updated firefox and thunderbird packages fixes security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it CVE-2014-8634. It was found that the Beacon interface...

PT-2014-8999 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache plugin versions prior to 0.9.4.1 Description: The issue allows remote attackers to conduct cross-site request forgery CSRF attacks. This is possible due to the improper handling of empty nonces, which can lead to the hijacking ...

WordPress SimpleFlickr 3.0.3 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in SimpleFlickr Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9396 Plugin Homepage: https://wordpress.org/plugins/simpleflickr/ Version Affected: 3.0.3 probably lower versions Severity: High Description: Vulnerable Parameter: id & parameter -...

WordPress PWG Random 1.11 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in PWG Random Wordpress Plugin Author: Manideep K CVE-ID : CVE-2014-9394 Plugin Homepage: https://wordpress.org/plugins/pwgrandom/ Version Affected: 1.11 probably lower versions Severity: High Description: Vulnerable Parameter: pwgrandomtitle,...

WordPress WP Limit Posts Automatically 0.7 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in WP Limit Posts Automatically Wordpress Plugin Author: Manideep K cve-id: CVE-2014-9401 Plugin Homepage: https://wordpress.org/plugins/wp-limit-posts-automatically/ Version Affected: 0.7 probably lower versions Severity: High Description: Vulnerable...

WordPress twitterDash 2.1 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in twitterDash Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9368 Plugin Homepage: https://wordpress.org/plugins/twitterdash/ Version Affected: 2.1 probably lower versions Severity: High About Plugin: twitterDash adds a field on the Dashboard. In this...

Humhub 0.10.0-rc.1 - SQL Injection

Exploit Title: Humhub condition is injected with the otherwise unsanitized $lastEntryId, which can be any SQL injection. Proof of Concept: Performing the following request index.php?r=notification/list/index&from=999 AND CASE WHEN 0x30SELECT substringpassword,1,1 FROM userpassword WHERE id = 1 TH...

shopex csrf脱裤 任意文件删除 文件写shell

简要描述： shopex csrf脱裤 任意文件删除 文件写shell 详细说明： 所有的漏洞缘由都是因为一个csrf引起的，那么我们来一个个看看： 安装最新版本的shopex： ctl.backup.php: function backup ifconstant'SAASMODE' exit; header"Content-type:text/html;charset=utf-8"; $params'sizelimit' = 1024; $params'filename' = $GET"filename"==""?date"YmdHis", time:$GET"filename";...

Cross site request forgery (csrf)

Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...

CVE-2014-6300

Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...

CVE-2014-6300

CVE-2014-6300 affects phpMyAdmin: XSS in micro history implementation and CSRF to create a root account via crafted URLs, vulnerable in phpMyAdmin 4.0.x < 4.0.10.3, 4.1.x < 4.1.14.4, and 4.2.x = 4.0.10.6, >= 4.1.14.7, and >= 4.2.13. The CVSS-like metrics in the NVD entry show MEDIUM s...

CVE-2014-6300

Cross-site scripting XSS vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery CSRF attack to crea...

MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass Reflected Cross-Site Scripting Persistent Cross-Site Scripting

MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass Reflected Cross-Site Scripting Persistent Cross-Site Scripting Advisory ID: 92152 Product: MODX Revolution Vendor: MODX Vulnerable Versions: 2.0.0–2.2.14 Tested Version: 2.2.14 Advisory Publication: 16 July, 2014 without technical details Vendor...

MODX Revolution 2.2.14 CSRF / XSS Vulnerabilities

MODX Revolution version 2.2.14 suffers from reflective cross site scripting, persistent cross site scripting, and cross site request forgery vulnerabilities. Product: MODX Revolution Vendor: MODX Vulnerable Versions: 2.0.0–2.2.14 Tested Version: 2.2.14 Advisory Publication: 16 July, 2014 without...

Cross site request forgery (csrf)

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

phpok配合csrf注入

简要描述： 参数未过滤 详细说明： 在projectcontrol.php function sortf $sort = $GET"sort"; if!$sort || !isarray$sort jsonexit"更新排序失败"; foreach$sort AS $key=$value $this-model'project'-updatetaxis$key,$value; jsonexit"更新排序成功",true; 可以看到系统没有通过自写函数get 而是直接用$GET接收变量 所以注入产生...

Researcher Discloses Wi-Fi Thermostat Vulnerabilities

Heatmiser, a U.K.-based manufacturer of digital thermostats, is contacting its customers today about a series of security issues that could expose a Wi-Fi-connected version of its product to takeover. Andrew Tierney, a “reverse-engineer by night,” whose specialty is digging up bugs in embedded...

X (Formerly Twitter): Delete Credit Cards from any Twitter Account in ads.twitter.com [New Vulnerability]

i've found a new critical logical vulnerability that allow deleteing credit card of any twitter account in ads.twitter.com , the vulnerability affects the Dismiss functionality of credit cards in payments methods section the vulnerability is similair to the one i've reported earlier h1 report 272...