WordPress WP Easy Gallery 1.7 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

HP Easy Printer Care ActiveX Control Directory Traversal (CVE-2011-4786)

A directory traversal vulnerability has been reported in HP Easy Printer Care. The vulnerability is due to a lack of sanitization in the HPESPRIT.XMLCacheMgr.1 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web-page...

Opera Browser Multiple Vulnerabilities-01 (Jul 2011) - Mac OS X

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Browser Multiple Vulnerabilities-01 July-11 (Linux)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnlin01jul11.nasl 5988 2017-04-20 09:02:29Z teissa $ Opera Browser Multiple Vulnerabilities-01 July-11 Linux Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Fedora Update for BackupPC FEDORA-2012-0825

Check for the Version of BackupPC OpenVAS Vulnerability Test Fedora Update for BackupPC FEDORA-2012-0825 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ImgPals Photo Host Version 1.0 Admin Account Disactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

Easy Banner Manager Pro Cross Site Request Forgery

Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html...

Easy Banner Manager Pro [CSRF] / (change admin password)

Exploit for php platform in category web applications Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html :...

deV!L`z Clanportal Witze 0.9 SQL Injection

======================================================================================== | Title : deV!Lz Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability | Author : Easy Laster | Download : http://dzcp-zone.de/downloads/?action=show&id=97 | Script : Witze Addon Versions 0.9 | Pric...

DZCP (deV!L_z Clanportal) Witze Addon 0.9 - SQL Injection

DZCP deV!Lz Clanportal Witze Addon 0.9 - SQL Injection ======================================================================================== | Title : deV!Lz Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability | Author : Easy Laster | Download :...

deV!L`z Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================================== | Title : deV!Lz Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability | Author : Easy Laster | Download :...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

Elefant CMS 1.0.2 Cross Site Scripting

elefantcms vendor: http://www.elefantcms.com Version: Latest stable release: 1.0.2 Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: www.epsilonlambda.wordpress.com Google dork: Powered by Elefant CMS...

Yealink VOIP Phone Cross Site Scripting

============================================================== Secur-I Research Group Security Advisory SV-2012-005 ============================================================== Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage:...

[SECURITY] Fedora 16 Update: BackupPC-3.2.1-7.fc16

BackupPC is a high-performance, enterprise-grade system for backing up Linux and WinXX and Mac OS X PCs and laptops to a server's disk. BackupPC is high ly configurable and easy to install and maintain...

VR GPub 4.0 Cross Site Request Forgery

+-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link : http://www.easy-script.com/scripts-PHP/vr-gpub-3907.html...

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

Added: 01/26/2012 CVE: CVE-2011-4786 BID: 51396 OSVDB: 78306 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software 2.5 and prior versions are vulnerable to remote code execution. The CacheDocumentXMLWithId method from...

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

Added: 01/26/2012 CVE: CVE-2011-4786 BID: 51396 OSVDB: 78306 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software 2.5 and prior versions are vulnerable to remote code execution. The CacheDocumentXMLWithId method from...

VR GPub 4.0 - Cross-Site Request Forgery

VR GPub 4.0 - Cross-Site Request Forgery +-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link :...

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution

Added: 01/26/2012 CVE: CVE-2011-4786 BID: 51396 OSVDB: 78306 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software 2.5 and prior versions are vulnerable to remote code execution. The CacheDocumentXMLWithId method from...