WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting

Vulnerability information Vulnerability title: WordPress Plugin Corner Ad 1.0.7 - Cross-Site Scripting Plugin home page: https://wordpress.org/plugins/corner-ad/ Affected Plugin version: 1.0.7 Test environment: Firefox 44, Windows10 Vulnerability details...

DEBIAN-CVE-2016-7915

The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device, as demonstrated by a Logitech DJ receiver...

kernel: HID: core: prevent out-of-bound readings

The hidinputfield function in 'drivers/hid/hid-core.c' in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device...

FortiManager and FortiAnalyzer XSS vulnerability

A vulnerablity in FortiManager/FortiAnalyzer address added page could allow malicious script being injected in the input field; this potentially enables XSS attacks...

Uber: Cross-site Scripting (XSS) autocomplete generation in https://www.uber.com/

Description: The website located at https://www.uber.com/ suffers from a generated Cross-site Scripting XSS vulnerability in the "find a city" input field. Reproduction Steps: Open the latest Chrome web browser Navigate to the following URL's "find a city input field": https://www.uber.com/ Type ...

Social Microblogging PRO 1.5 Cross Site Scripting

Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored XSS=== "Web Site"...

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome &...

crea8social 1.3 - Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: crea8social 1.3 Stored XSS Vulnerability Date: 24-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.3 Vendor Homepage: http://codecanyon.net/item/crea8social-php-social-networking-platform-v13/9211270 Tested on: Chrome &...

Crea8Social 1.3 - Persistent Cross-Site Scripting

Exploit Title: crea8social 1.3 Stored XSS Vulnerability Date: 24-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.3 Vendor Homepage: http://codecanyon.net/item/crea8social-php-social-networking-platform-v13/9211270 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored XSS=== Crea...

vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: vBulletin Verify Email Before Registration Plugin - SQL Injection Date: September 19 2014 Version: Any vBulletin 4.. version which has the plugin installed. Plugin: http://www.vbulletin.org/forum/showthread.php?t=294164 Author: Dave FW/...

Hotfoon Dialer 4.0 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6156/info A buffer overflow vulnerability has been reported for the Hotfoon dialer. The vulnerability exists in a text input field for dialing telephone numbers. Reportedly, Hotfoon4.exe does not adequately perform bounda...

Acc PHP eMail 1.1 - CSRF

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc PHP eMail v1.1 - CSRF // Author Info x Author: bi0 x Contact: [email protected] x Homepage :...

WordPress Blogstand Smart Banner 1.0 Cross Site Scripting

Exploit Title : Wordpress blogstand-smart-banner.1.0 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/blogstand-smart-banner/ Software Link : http://downloads.wordpress.org/plugin/blogstand-smart-banner.1.0.zip Date : 2014-06-28...

IRCCloud: Missing Character Restriction

In the team adding page , the team name has no restrictions in the input field. In the poc i have named the team as !@$%^& which is fully of symbols...

[RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration

Advisory: rexx Recruitment Cross-Site Scripting in User Registration RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in rexx Recruitment's user registration page during a penetration test. If attackers can persuade users to click on a prepared link or redirected them to suc...

CVE-2013-0307

Cross-site scripting XSS vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter...

Wordpress Download Manager Free & Pro 2.5.8 - Persistent Cross Site Scripting

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin: Wordpress Download Manager Free & Pro Persistent Cross Site Scripting Google Dork: Date: 12-06-2013 Exploit Author: IT Nerdbox Vendor Homepage: http://www.wpdownloadmanager.com Software Link:...

WebDisk 3.0.2 PV iOS - Command Execution Vulnerability

Document Title: =============== WebDisk 3.0.2 PV iOS - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1035 Release Date: ============= 2013-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 103...

Fork CMS 3.2.x - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Fork CMS 3.2.x - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/52319/info Fork CMS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits...