921 matches found
Connect Daily 3.2.8/3.2.9 ViewYear.html Multiple Parameter XSS
No description provided by source...
Connect Daily 3.2.8/3.2.9 ViewWeek.html week Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
Daily Inspirational Quotes Script SQL Injection Vulnerability
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Daily Inspirational Quotes Script SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected]...
Connect Daily 3.2.8/3.2.9 ViewCal.html item_type_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
Connect Daily 3.2.8/3.2.9 ViewSearch.html Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
Connect Daily 3.2.8/3.2.9 ViewDay.html Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
RIG Exploit Kit Pushing Cryptowall Ransomware
With Cryptolocker quite possibly on its way to becoming yesterday’s ransomware news after the successful takedown of part of its distribution infrastructure, alternatives are already available. Cryptowall is the latest to grab some attention and traction on victimized computers. Cisco reported on...
rubygem-openshift-origin-node: cron.daily/cron.weekly denial of service
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly...
WordPress Theme Daily Deal - Arbitrary File Upload
WordPress Theme Daily Deal - Arbitrary File Upload source: https://www.securityfocus.com/bid/63257/info The Daily Deal theme is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attack...
WordPress Daily Deal Theme - Arbitrary Shell Upload Vulnerability
Daily Deal theme is prone to an arbitrary shell upload vulnerability that exists because application fails to adequately clean up user-supplied input. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the theme...
WordPress Theme Daily Deal - Arbitrary File Upload
source: https://www.securityfocus.com/bid/63257/info The Daily Deal theme is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary file...
Discuz! 7. X background arbitrary code execution-vulnerability warning-the black bar safety net
! Since the Scheduled Tasks feature is not on the file name to do any restriction leads only need to upload files to the/include/crons/directory, you can perform First of all to the global attachment settings to modify the Upload Directory ! And then directly take him to itself, there is a...
Daily Dot News portal hacked by Syrian Electronic Army with phishing attack
Pro-Assad hacker group the Syrian Electronic Army claims to have breached the online news portal "Daily Dot" and deleted an article with a caricature of Syrian President Bashar al-Assad. SEA hackers gave an advance warning to Daily Dot editorial team via twitter, said "Dear @dailydot, please remo...
Daily Dot News portal hacked by Syrian Electronic Army with phishing attack
Pro-Assad hacker group the Syrian Electronic Army claims to have breached the online news portal "Daily Dot" and deleted an article with a caricature of Syrian President Bashar al-Assad. SEA hackers gave an advance warning to Daily Dot editorial team via twitter, said "Dear @dailydot, please remo...
LivingSocial Ups its Password Encryption After Breach
The popular daily deal site LivingSocial announced Monday it has abandoned the SHA1 hash for Blowfish’s bcrypt following a massive data breach that impacted 50 million customers. The company confirmed last weekend that its computer systems were attacked and thieves gained access to names, e-mail...
[AppUse] Android Pentest Platform Unified Standalone Environment
AppSec Labs recently developed the AppUse Virtual Machine. This system is a unique, free, platform for mobile application security testing in the android environment, and it includes unique custom-made tools created by AppSec Labs. There is no need for installation of simulators and testing tools...
WSO manager edition 1.0
Сделан на основе WSO manager на файлах | WSO web-shells manager edition files - no MySql & etc. Данная утилита предназначенна для системных администраторов для удаленного управления своими серверами. Любое незаконное использование скрипта преследуется по закону. было: 1. Добавление шеллов по...
WordPress Dailyedition-mouss Multiple Vulnerabilities
WordPress Dailyedition-mouss theme suffers from a remote SQL injection vulnerability, XSS, FPD, AoF, DoS, AFU vulnerabilities. Note that this finding houses site-specific data. I want to warn you about multiple vulnerabilities in Daily Edition Mouss theme for WordPress. In 2011 when I wrote about...
IL, XSS, FPD, AoF, DoS, AFU vulnerabilities in Daily Edition Mouss theme for WordPress
Hello 3APA3A! I want to warn you about multiple vulnerabilities in Daily Edition Mouss theme for WordPress. In 2011 when I wrote about Cross-Site Scripting WASC-08, Full path disclosure WASC-13, Abuse of Functionality WASC-42 and Denial of Service WASC-10 vulnerabilities in TimThumb and multiple...
WordPress Daily Edition Mouss XSS / Disclosure / Shell Upload
Hello list! I want to warn you about multiple vulnerabilities in Daily Edition Mouss theme for WordPress. In 2011 when I wrote about Cross-Site Scripting WASC-08, Full path disclosure WASC-13, Abuse of Functionality WASC-42 and Denial of Service WASC-10 vulnerabilities in TimThumb and multiple...