DCFM Blog 0.9.7 Blind SQL Injection

DCFM Blog Version 0.9.7 Blind SQL Injection Vulnerability time based-attack ================================================================================ Discovered by NA , NAattutanota.com ======================================== Description ============ Open-source blog project. Free blog...

Facebook (Law Enforcement) - Filter Bypass Vulnerability

Document Title: =============== Facebook Law Enforcement - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1774 Release Date: ============= 2016-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 177...

Gratipay: prevent null bytes in email field

Hi, Zawad here. Description I recently visited gratipay.com and logged in. I found that invalid characters eg. null bytes were accepted in email field, which is obviously not an expected behavior. Steps to Reproduce 1. Go to https://gratipay.com/username/emails/ 2. Enter [email protected]\0 or...

Anghami: [https://www.anghami.com/updatemailinfo/] Sql Injection

Hi , I'd like to report a sql injection issue, first you need to be logged in in order to exploit this issue . The vulnerable parameter is validateemail . some tests [email protected]&phoneormail= = Please Check Your email to verify [email protected]'&phoneormail= =...

DigitalSellz: The email updates issues

The email message content at the https://www.digitalsellz.com/user//email-updates page contrary to the email customization one is not validated properly. So this form allows all the html tags and their parameters. For example, all the following tags are sent as is: Link Link alert3 and all their...

Coinbase: ByPassing the email Validation Email on Sign up process in mobile apps

Hi, According to the design When the new user sign up using mobile appsandroid,ios.It will ask for the confirmation of the email.It will send a confirmation mail to mail id and a screen will also appear in the mobile app. The user needs to open the email in the device then the screen will Off and...

Bugzilla < 4.0.15 / 4.2.11 / 4.4.6 / 4.5.6 Multiple Vulnerabilities

Binary data 8606.prm...

Bugzilla Privilege Escalation - Email Validation Bypass (CVE-2014-1572)

A privilege escalation vulnerability has been found in Bugzilla. The vulnerability is due to a flaw that allows a registering user alter his email address after token validation. Any authenticated remote attacker may leverage this vulnerability to gain administrative access to the vulnerable serv...

php云人才系统 小漏洞一步步getshell（后台）

简要描述： php云人才系统 小漏洞一步步getshell，这里包含了php与mysql交互时候的特性（也算一个漏洞），还有phpyun自身图片的验证机制问题，等等，步骤比较艰辛，本来想在这里搞一个csrf呢，找了半天没有找到，到时找到一大堆xss，这里就不利用xss了，且看分析 详细说明： 首先我们做一个小测试： 对于mysql存储来说，建站者都会给每一个字段设置长度，然后当我们插入进去的数据长度超过了设置的长度，那么mysql是不会报错，然而会自然截断存储，这个就给我们编写程序的人留下了隐患。 利用场景分析...

Ecmall Sql二次注入第二弹

简要描述： 验证了一处 却没有验证另一处。 已打20140618补丁。 详细说明： ecmall在注册的时候 您输入的邮件地址不正确，请重新输入 返回上一页 是验证了邮件地址是否正确。 可是在 修改email的时候却没有验证。 / 修改电子邮箱 @author Hyber @usage none / function email $userid = $this-visitor-get'userid'; if !ISPOST / 当前位置 / $this-curlocalLANG::get'membercenter', 'index.php?app=member',...

Concrete CMS: Bypass auth.email-domains

Email addresses are stored as VARCHAR64. the length is verified on client side only , using a proxytemper data attacker can add longer length email which can be further abused .Exploiting this is rather straightforward: get an email address of 128 characters long . Now register with your 128...

Invision Power Board Admin 帐号接管命令执行漏洞

Invision Power Board是一个非常流行的PHP论坛程序。 Invision Power Board没有正确验证注册页面User Email字段的输入内容，导致远程攻击者能够修改任意用户的登录密码。通过修改管理员帐户的密码，攻击者能够远程执行代码。成功利用该漏洞需要攻击者获得目标帐户的用户名和注册邮件地址。 0 Invision Power Board Invision Power Board 3.4.4 厂商补丁： Invision Power Board -------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

Code injection

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address...

CVE-2012-0795

CVE-2012-0795 affects Moodle versions 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1. The issue is Moodle’s email address settings validation, allowing remote authenticated users to cause an unspecified impact via a crafted address. Public references in NVD an...

Debian DSA-2421-1 : moodle - several vulnerabilities

Several security issues have been fixed in Moodle, a course management system for online learning : - CVE-2011-4308 / CVE-2012-0792 Rossiani Wijaya discovered an information leak in mod/forum/user.php. - CVE-2011-4584 MNet authentication didn't prevent a user using 'Login as' from jumping to a...

Microsoft Outlook read receipt function vulnerability

Overview Microsoft Outlook contains a vulnerability in the read receipt function. Microsoft Outlook contains a vulnerability in the read receipt function. A read receipt may be sent unintentionally, notifying the sender that the email was received. Ayako Kozakai of NTT DATA SECURITY CORPORATION...

xt:Commerce 3.x Second Order SQL Injection

xt:Commerce 3.X Second Order SQL Injection Vulnerability xtcvalidateemail felix |at| malloc.im =============================================================================== Overview: xt:Commerce 3 is an open source shopping software based on osCommerce. It is vulnerable to a second order SQL...

php: DoS in filter_var() via long email string

Stack consumption vulnerability in the filtervar function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTERVALIDATEEMAIL mode is used, allows remote attackers to cause a denial of service memory consumption and application crash via a long e-mail address string...

Design/Logic Flaw

The t3libdiv::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filtervar FILTERVALIDATEEMAIL operations in PHP, which allows remote attackers to cause a denial of service memory consumption and application crash via a...