842 matches found
XSS vulnerability in Scribe CMS
Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...
Google Releases Web App Security Course
Google has released a new online training course for Web application developers designed to teach them how to avoid common programming mistakes that lead to vulnerabilities such as cross-site scripting, cross-site request forgery and others. The course, which is part of the company’s Google Code...
PDQ Script 1.0 <== [listingid] SQL Injection
Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...
Symantec ConsoleUtilities - ActiveX Buffer Overflow (Metasploit)
Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. require 'msf/core' class Metasploit3 'Symantec ConsoleUtilities ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack overflow in Symantecs ConsoleUtilities...
Oracle Secure Backup Server Bypass / Command Injection
!/bin/bash Oracle Secure Backup Administration Server authentication bypass, plus command injection vulnerability 1-day exploit for CVE-2009-1977 and CVE-2009-1978 PoC script successfully tested on: Oracle Secure Backup Server 10.3.0.1.0win32release MS Windows Professional XP SP3 In August 2009,...
Oracle Secure Backup Server 10.3.0.1.0 Auth Bypass/RCI Exploit
Exploit for windows platform in category remote exploits ============================================================== Oracle Secure Backup Server 10.3.0.1.0 Auth Bypass/RCI Exploit ============================================================== !/bin/bash Oracle Secure Backup Administration Serv...
Oracle Secure Backup Server 10.3.0.1.0 - Authentication Bypass / Remote Code Injection
!/bin/bash Oracle Secure Backup Administration Server authentication bypass, plus command injection vulnerability 1-day exploit for CVE-2009-1977 and CVE-2009-1978 PoC script successfully tested on: Oracle Secure Backup Server 10.3.0.1.0win32release MS Windows Professional XP SP3 In August 2009,...
Oracle Secure Backup Server 10.3.0.1.0 - Authentication Bypass Remote Code Injection
Oracle Secure Backup Server 10.3.0.1.0 - Authentication Bypass Remote Code Injection !/bin/bash Oracle Secure Backup Administration Server authentication bypass, plus command injection vulnerability 1-day exploit for CVE-2009-1977 and CVE-2009-1978 PoC script successfully tested on: Oracle Secure...
GMAIL-LITE Arbitrary File Upload 0.10 <=
============================================================================== GMAIL-LITE Arbitrary File Upload 0.10 = ============================================================================== Discovered by br0, YGN Ethical Hacker Group, Myanmar http://yehg.net believe in full disclosure URL...
DOMPDF Arbitrary File Read <= 0.5.1
================================= DOMPDF Arbitrary File Read = 0.5.1 ================================= Discovered by: Aung Khant, YGN Ethical Hacker Group, Myanmar http://yehg.net/ believe in full disclosure Advisory URL: http://yehg.net/lab/pr0js/view.php/Apache20Security20Bypass20Vul20DomPDF.pd...
Cpanel (lastvisit.html domain) Arbitrary File Disclosure Vuln (auth)
Exploit for multiple platform in category remote exploits ==================================================================== Cpanel lastvisit.html domain Arbitrary File Disclosure Vuln auth ====================================================================...
Cpanel File Disclosure
+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...
gallerymx-sql.txt
----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...
Oracle Portal XSS fixed by CPU July 2008
Class: Input Validation Error Risk: Low Remote: Yes Oracle has just released CPU July 2008 critical patch that fixes a flaw which allows code injection by malicious web users into the web pages viewed by other users. The security issue was found on POPUPNAME parameter OF PORTAL.WWPOBHOMEPAGE web...
MegaBBS ASP Forum Cross-Site Scripting
HSC MegaBBS ASP Forum Cross-Site Scripting MegaBBS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of t...
[HSC] IPortalX Forums Cross-Site Scriptin
HSC IPortalX Forums Cross-Site Scripting Vulnerability IPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
dokeos-xss.txt
HSC Dokeos Multiple Cross-Site Scripting Vulnerabilities Dokeos is a learning management systemused to manage e-learning. It's prone to cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the conte...
bitweaver-sqlxss.txt
HSC Bitweaver XSS & SQL Injection Vulnerability Bitweaver is an open source content management system. Its speed and power are ideal for large-scale community websites and corporate applications, but it is simple enough for non-technical small site users to set up and administrate. It comes fully...
mps-insertion.txt
HSCMySpace Scripts - Poll Creator JavaScript Injection Vulnerability Our MySpace Poll Creator script is the ultimate addition to your MySpace resource site. The script enables your user to quickly and easily create a poll that they can post to profile or bulletin to all their friends. Everyone...
GWExtranet Script Injections & Privilege Escalation Vulnerability
HSC GWExtranet Script Injections & Privilege Escalation Vulnerability Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...