Google Finance was traced to reflected File Download(RFD)vulnerabilities-vulnerability warning-the black bar safety net

! A Portuguese network security expert David Sopas found the impact of Google Finance a reflected File DownloadRFDvulnerabilities. I'm in audits of other clients time to discover this vulnerability, through RFD, you need to establish a page to force the download. This Google JSON file of the...

Joomla Komento Cross Site Scripting

CVE Reference: CVE-2015-7324 Original advisory: https://www.davidsopas.com/komento-joomla-component-persistent-xss/ Author: David Sopas @dsopas Komento is a Joomla! comment extension for articles and blogs in K2, EasyBlog, ZOO, Flexicontent, VirtueMart and redShop. @http://stackideas.com/komento ...

PrestaShop <= 1.5.1 Persistent XSS

PrestaShop = 1.5.1 Persistent XSS Tested under: Firefox, Chrome and Safari latest versions Discover Credits: David Sopas - [email protected] | @dsopas | davidsopas.com/labs Original link: http://davidsopas.com/labs/prestashopxss.txt Description: PrestaShop is the most reliable and flexible...

samtodo-xss.txt

Original advisory: http://www.davidsopas.com/soapbox/samtodo.txt XSS in SamTodo v1.1 http://samjlevy.com/samtodo by David Sopas Ferreira Found and reported at : 22-05-2008PT Full disclosure at : 05-06-2008PT ?!--------------------------------------------------------- Flaws -----!? XSS attacks on...

phpns-sql.txt

PHPNS SQL Injection Software: phpns current version v1.1 Vendor link: http://phpns.com Attack: SQL Injection Original advisory: http://14house.blogspot.com/2007/08/phpns-sql-injection.html Discovered by: David Sopas Ferreira a.k.a SmOk3 SQL Injection ------------- An attacker may execute arbitrar...

PHPNS 1.1 (shownews.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== PHPNS 1.1 shownews.php id Remote SQL Injection Vulnerability ============================================================== PHPNS SQL Injection Software: phpns current version...

ACG News 1.0 (aid/catid) Remote SQL Injection Vulnerabilities

No description provided by source. ACG News SQL Injection Software: ACG News 1.0 Vendor link: http://www.altercoder.com Vendor Demo link: http://acgnews.uw.hu/index.php Attack: SQL Injection Original Advisory: http://14house.blogspot.com/2007/08/acg-news-sql-injection.html Discovered by: David...

arcadem-sql.txt

Arcadem Remote File Inclusion Flaw / SQL Injection Software: Arcadem 2.01 Vendor link: http://agaresmedia.com Attack: Remote File Inclusion / SQL Injection Original advisory: http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html Discovered by: David Sopas Ferreira a.k.a SmOk3...

Arcadem 2.01 - SQL Injection / Remote File Inclusion

Arcadem Remote File Inclusion Flaw / SQL Injection Software: Arcadem 2.01 Vendor link: http://agaresmedia.com Attack: Remote File Inclusion / SQL Injection Original advisory: http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html Discovered by: David Sopas Ferreira a.k.a SmOk3...

[SA23733] Fastilo "p" Cross-Site Scripting Vulnerability

TITLE: Fastilo "p" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23733 VERIFY ADVISORY: http://secunia.com/advisories/23733/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Fastilo 2.x http://secunia.com/product/13222/ DESCRIPTION: David Sopas has...

[SA16903] Mall23 eCommerce "idOption_Dropdown_2" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16778] Mall23 eCommerce "idPage" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...