Indeziner CMS Cross Site Scripting

Cross Site Scripting on INDEZINER CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: indeziner.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: vendorprofile.php Exploit: http://host/vendorprofile.php?vendorid=xss PoC: - Target:...

DuBose Web Group CMS Cross Site Scripting

Cross Site Scripting on DuBose Web Group CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: www.duboseweb.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: product.php Exploit: http://host/path/product.php?pname=xss PoC: - Target:...

CMS Studio Cross Site Scripting

Multiple Cross Site Scripting on CMS STUDIO Risk: Low CWE number: CWE-79 Date: 15/04/2014 Vendor: www.cmsstudio.info Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://host/index.php?spageid=xss...

Joomla Wrapper Cross Site Scripting

Cross Site Scripting on Joomla "comwrapper" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comwrapper&itemid= Exploit: -Target: http://host.com -Vuln. Fil...

Joomla BeaconDecode Cross Site Scripting

Cross Site Scripting on Joomla "combeacondecode" Risk: Low CWE number: CWE-79 Date: 14/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=combeacondecode&task= Exploit: - Target: http://site.com -...

CMS United Cross Site Scripting

Cross Site Scripting on CMS United Risk: Low CWE number: CWE-79 Date: 09/04/2014 Vendor: www.cmsunited.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /home.php Exploit: http://host/home.php?id=xss PoC: - Target: www.ralphvanmanen.nl -...

WebLife CMS SQL Injection

Mulitple SQL Injection on WebLife CMS Risk: High CWE number: CWE-89 Date: 09/04/2014 Vendor: www.weblife.sk Author: Felipe "Renzi" Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://host/index.php?jazyk=SQLI http://host/index.php?page=SQLI PoC:...

Cool PDF Reader 3.0.2.256 - Buffer Overflow

Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis Provencher Protek Research Lab's...

Foxit Advanced PDF Editor 3 contains a stack buffer overrun vulnerability

Overview Foxit Advanced PDF Editor 3, and possibly earlier versions, contains a stack buffer overrun vulnerability. Description Foxit Advanced PDF Editor 3, and possibly earlier versions, contains a stack buffer overrun vulnerability that may be exploited by an attacker that is able to successful...

Pulse Pro CMS 1.7.2 Cross Site Scripting

Exploit Title: Pulse Pro CMS v.1.7.2 - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://pulsecms.com Date: 13-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista FF Cross-Site Scripting XSS on Front Site POC:...

eSyndiCat Pro 2.3.05 Cross Site Scripting

Exploit Title: eSyndiCat Pro v2.3.05 Cross-Site Scripting XSS Script Page : http://www.esyndicat.com Date: 24:11:2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can be performed als...

Community Server - Stored Cross-Site Scripting in User's Signature

Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed by Telligent. It uses ASP.NET platform C and Microsoft SQL Server database. From it's 5.0 version, the software was renamed to...

Telligent Community Server 5.x Cross Site Scripting

Editor's note: 4 Advisories are grouped together here. ======================================================================= Community Server - Stored Cross-site Scripting in user's signature. - Product description: Community Server is a communities and collaboration web application developed b...

Minishare 1.5.5 BoF Vulnerability (users.txt) EggHunter

Exploit for windows platform in category local exploits ======================================================= Minishare 1.5.5 BoF Vulnerability users.txt EggHunter ======================================================= Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt -...

Minishare 1.5.5 Buffer Overflow

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt Date: 11/02/2010 Author: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.4.0 - 1.5.5 Tested on: Windows XP SP3 EN CVE: MessageBoxA TITLE=HAX TEXT=HAX WIN XP SP3 Shellcode...

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability

ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-155 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco WebEx -- TippingPointTM IPS Customer...

Joomla Virtuemart SQL Injection

Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...

aMSN SSL Certificate Vulnerability

aMSN SSL Certificate Vulnerability I. The Vulnerability aMSN does not check SSL certificate before sending MSN user credentials. An attacker is able to obtain MSN username and password with a spoofed certificate and no alert is generated to the user. This vulnerability was found in aMSN 0.97.2...

Gizmo SSL Certificate Vulnerability

Gizmo SSL Certificate Vulnerability I. The Vulnerability Gizmo does not check SSL certificate before sending user credentials. An attacker is able to obtain username and password with a spoofed certificate and no alert is generated to the user. This vulnerability was found in Gizmo for Linux...

Unfixed XSS vulnerability at migre.me

Security researcher Gabriel Lima, has submitted on 17/06/2009 a cross-site-scripting XSS vulnerability affecting migre.me, which at the time of submission ranked 14562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...