Unfixed XSS vulnerability at mci.ir

Security researcher Hacked by Montazer313 Digital Security Team, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting mci.ir, which at the time of submission ranked 3580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Joomla Lyftenbloggie Cross Site Scripting

Joomla Component comlyftenbloggie XSS/HTML Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /\ \ /\ \ \ \ \L\ \ \ \ \ /\ \ \ \ /',\ \ /\ /\ /\ \ /'\ /' \ /'\ \ \ /\ /, \ \ \ \ \ \ \ \ \ /\ \L./\ /\ /\ / \ \ \// \ \ \ \/ \ /.\ \ \ \...

Joomla Component (com_annuaire) SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comannuaire SQL Injection Vulnerability ===========================================================...

Joomla Component (com_competitions) SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component comcompetitions SQL Injection Vulnerability ===============================================================...

Joomla Component (com_catalogue) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comcatalogue SQL Injection Vulnerability ============================================================...

Joomla Component (com_storedirectory) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= Joomla Component comstoredirectory SQL Injection Vulnerability =================================================================...

Joomla Component (com_catalogue) LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comcatalogue LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /...

SAP NetWeaver Administrator Panel ECC 6.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory Application: SAP NetWeaver Administrator panel Versions Affected: SAP NetWeaver Administrator panel from ECC 6.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010...

[DSECRG-09-029] Oracle BI Publisher Enterprise 10 - Response Splitting

Digital Security Research Group DSecRG Advisory DSECRG-09-029 Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://oracle.com Bugs: Response Splitting/XSS/phishing credentials...

[DSECRG-09-032] Oracle Application Server - Linked XSS vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-032 Application: Oracle BPEL Console version 10.1.3.3.0 Versions Affected: Oracle BPEL Console version 10.1.3.3.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date of Public...

sasp cms (fckeditor) shell upload Vulnerability

Exploit for php platform in category web applications =============================================== sasp cms fckeditor shell upload Vulnerability =============================================== Author: ashiyane digital security team Version: 0.9 Category:: upload bug discovered by:ramin bazghan...

[DSECRG-09-068] SAP NetWaver SLD - multiple XSS

Digital Security Research Group DSecRG Advisory DSecRG-09-068 Application: SAP NetWeaver SLD Versions Affected: 6.4 - 7.02 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 last response: 06.05.2010 Date of Public Advisory: 13.07.2010 CVE-number:...

SAP Netweaver 6.4 - 7.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-040 Application: SAP Netweaver Versions Affected: Version 6.4 - 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 26.05.2009 Vendor response: 27.05.2009 Date of Public Advisory: 13.07.2010 CVE-number: Author: Alexandr Polyak...

Green Shop SQL Injection Vulnerabilities

Exploit for php platform in category web applications ======================================== Green Shop SQL Injection Vulnerabilities ======================================== x Tybe: SQL Injection Vulnerabilities x Vendor: egreen.ir x Script Name: Green Shop x author: Ashiyane Digital Security...

Green Shop - SQL Injection

Green Shop - SQL Injection x Tybe: SQL Injection Vulnerabilities x Vendor: egreen.ir x Script Name: Green Shop x author: Ashiyane Digital Security Team x Thanks To N4H ? Submit By PrinceofHacking ^^ x Mail : PrincedotH4ck@gmaildotcom D0rk: "egreen.ir" Exploit: http://site.org/index.php?pid=SQLi E...

Green Shop - SQL Injection

x Tybe: SQL Injection Vulnerabilities x Vendor: egreen.ir x Script Name: Green Shop x author: Ashiyane Digital Security Team x Thanks To N4H ? Submit By PrinceofHacking ^^ x Mail : PrincedotH4ck@gmaildotcom D0rk: "egreen.ir" Exploit: http://site.org/index.php?pid=SQLi Ex:...

IBM BladeCenter Management Module Cross Site Scripting / Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-054 Application: IBM BladeCenter Managemet Module Versions Affected: BPET48L and may be other versions Vendor URL: http://www-03.ibm.com/systems/bladecenter/ Bug: XSS,Directory traversal, Information disclosure Exploits: YES Reported:...

IBM Bladecenter Management - Multiple Web Application Vulnerabilities

IBM Bladecenter Management - Multiple Web Application Vulnerabilities DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group...

IBM Bladecenter Management - Multiple Web Application Vulnerabilities

DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group DSecRG Advisory DSECRG-09-054 Application: IBM BladeCenter Managemet...

Safari JS JITed shellcode - exec calc ASLR/DEP bypass

Safari JS JITed shellcode - exec calc ASLR/DEP bypass. Shellcode exploit for windows platform var SPRAY=""; var JIT=" "+ "var y="+ "0x22222222^"+ / START OF OFFSET / "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ /we don't wanna NULLS in pointer/ "0x22222222^"+ "0x22222222^"+...