ClipShare 4.1.1 - Multiples Vulnerabilities

ClipShare 4.1.1 - Multiples Vulnerabilities Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Last...

QQ bypass the main display account add vulnerability-vulnerability warning-the black bar safety net

Brief description: Should be QQ again and yet another to bypass the main display account add friends bug,you can add some set to:only by the main display account to find the user. But the condition is the need for space is set to a non-any people inside. But now most of the users in order to...

Wordpress Plugin plg_novana Sql Injection Vulnerability

WordPress Plg Novana third party plugin suffers from a remote SQL injection vulnerability. Exploit Title : Wordpress plgnovana plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Discovered By : sil3nt Home : www.ashiyane.org Security Risk : High - SQL Injection Dork :...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

Friends in War Make or Break v1.3 SQL Injection (authbypass) Vulnerability

Exploit for php platform in category web applications Exploit Title: friendsinwar Make or break V1.3 SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link:...

Videosmate Organizer 4.2 Authentication Bypass / Path Disclosure

===================================================================== Vulnerable software: Videosmate Organizer V 4.2 all versions Vendor: http://videosmate.com/ Software License: Commercial Vulns: Authentication Bypass & Path Disclosure Risk: Critical Dork: intext:Powered by Videosmate Organizer...

Thinksns microblogging system injection vulnerability a gold-bug warning-the black bar safety net

Author: Liuker Blog: www.2bhack.net I recently nothing to do Don't ask me how the audit of the color of the pen don't know what is audit? Visually it is a few friends have seen me audit the code time to give them a screenshot Just get some. In a few days and then engage in several section of the...

CVE-2012-4007

The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card...

Information disclosure

The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card...

CVE-2012-4007

The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card...

mixi for Android information management vulnerability

Overview mixi for Android contains an issue which stores friends' comments on a SD card. mixi for Android provided by mixi, Inc. contains an issue which stores friends' comments on a SD card, therefore other applications can access this information directly from the SD card. Kazuhiko Kusano of...

JVN#92038939: mixi for Android information management vulnerability

mixi for Android provided by mixi, Inc. contains an issue which stores friends' comments on a SD card, therefore other applications can access this information directly from the SD card. Impact If a user of the affected product uses a malicious Android application, friends' comments may be...

Nike+ Panel / Mobile App Cross Site Scripting

Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...

PHP-Pastebin Cross Site Scripting

Author : L3b-r1'z Date : 2012-April-30 Title : Php-Pastebin Stored XSS Vulnerability Email : [email protected] Site : Sec4Ever.com Google Dork : allintext: "Php-Pastebin V.2" + P0c : Add New Paste put in the Paste Name alert"L3br1z"; You Will See The Alert : Proud To Be Lebanese Thx To All My...

Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Utopia News Pro 1.4.0 Greetz Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020 JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng All FriendS...

Facebook Game - Zynga's Words With Friends Detected (deprecated)

Binary data 6374.prm...

Cross site scripting

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1215

The CVE-2012-1215 entry describes a Cross-site scripting (XSS) vulnerability in the Add friends module of the Yoono Firefox extension, exploited via the create field in a "Create a group" action. The affected product is the Yoono extension for Firefox, with versions prior to 7.7.8. The underlying...

CVE-2012-1215

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

Design/Logic Flaw

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...