Directory Listing Script Version 2 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Directory Listing Script Version 2 Multiple Vulnerabilities Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Directory Listing Script - Version 2 Download:...

CMS NWD - Sistemas On Line SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CMS NWD - Sistemas On Line SQL Injection Vulnerability Date: 14/13/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: CMS NWD Software Link:...

IWantOneButton 3.0.1 Wordpress Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethica...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version:...

HTB22846: SQL Injection in IWantOneButton wordpress plugin

Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: SQ...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: S...

HTB22847: XSS in IWantOneButton wordpress plugin

Vulnerability ID: HTB22847 Reference: http://www.htbridge.ch/advisory/xssiniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: XSS Cross...

IWantOneButton 3.0.1 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10...

SWFUpload v2.5.0 Beta 3 File Arbitrary Upload

Exploit for php platform in category web applications Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload Date: 07/02/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: SWFUpload v2.5.0 Beta 3 Software Link:...

comercioplus 5.6 - Multiple Vulnerabilities

Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link: http://www.comerciosonline.com/index.php?p=8...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

SquirrelMail Virtual Keyboard 0.9.1 Cross Site Scripting

Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...

Cisco ASA Software HTTP Response Splitting Vulnerability

Cisco ASA Software versions prior to 8.12 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to improper handling of characters within URLs. An unauthenticated, remote attacker could exploit this...

Researchers Get Funding for New Secure Operating System

Researchers at the University of Illinois at Chicago have received a $1.15 million grant from the National Science Foundation to build a new computer operating system based on virtual machines and the concept of isolation. The new OS project, called Ethos, is the brainchild of UIC associate...

CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Unfixed XSS vulnerability at servicios.personal.com.ar

Security researcher Daniel Godoy, has submitted on 03/01/2010 a cross-site-scripting XSS vulnerability affecting servicios.personal.com.ar, which at the time of submission ranked 6332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. ...

Unfixed XSS vulnerability at chile.dineromail.com

Security researcher Daniel Godoy, has submitted on 02/01/2010 a cross-site-scripting XSS vulnerability affecting chile.dineromail.com, which at the time of submission ranked 10401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It i...

Unfixed XSS vulnerability at mexico.dineromail.com

Security researcher Daniel Godoy, has submitted on 02/01/2010 a cross-site-scripting XSS vulnerability affecting mexico.dineromail.com, which at the time of submission ranked 10401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It ...

Unfixed XSS vulnerability at brasil.dineromail.com

Security researcher Daniel Godoy, has submitted on 02/01/2010 a cross-site-scripting XSS vulnerability affecting brasil.dineromail.com, which at the time of submission ranked 40792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It ...

SharePoint Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others Risk: Medium Status:...