Nodejs js-yaml load() Code Execution (CVE-2013-4660)

A JavaScript Code Execution vulnerability has been reported in Nodejs...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8657)

Mozilla Firefox has been updated to the 24.2.0 ESR security release. This is a major upgrade from the 17 ESR release branch. Security issues fixed : - Application Installation doorhanger persists on navigation. MFSA 2013-105. CVE-2013-5611 - Miscellaneous memory safety hazards rv:24.2. MFSA...

CVE-2013-6837

The CVE describes a Cross-site Scripting (XSS) vulnerability in the setTimeout function of js/jquery.prettyPhoto.js for prettyPhoto 3.1.4 and earlier. The flaw allows an attacker to inject arbitrary script or HTML via a crafted PATH_INTO to the default URI. Affected component: prettyPhoto (JavaSc...

CVE-2013-6837: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATHINTO to the default URI...

PT-2013-6283

Name of the Vulnerable Software and Affected Versions ThemeBeans Blooog theme version 1.1 for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to the "assets/js/jplayer.swf" endpoint. Recommendations For...

CVE-2013-7129: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf...

WordPress Js-Multi-Hotel 2.2.1 Cross Site Scripting

Exploit Title : Wordpress Js-Multi-Hotel Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content//plugins/js-multihotel/ Date: 2013-11-30 Vendor Homepage : http://wordpress.org Plugin Name : Js Multi Hotel Version : 2.2.1 Tested on: Windows , Lin...

程氏舞曲CMSPHP3.0储存型xss与后台任意文件写入漏洞

简要描述： 插入 构造的js 可 getshell 详细说明： user/space.php?ac=edit&op=zl 修改 签名处，没有 任何过滤。xss产生 后台 看了下 可以写任意格式文件。。 抓包。。 POST /admin/skins/skins.php?ac=xgmb&op=go&path=../../skins/index/html/ HTTP/1.1 Accept: text/html, application/xhtml+xml, / Referer:...

Nodejs - 'js-yaml load()' Code Exec (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Nodejs js-yaml load Code Exec',...

Nodejs js-yaml load() Code Execution Vulnerability

For node.js applications that parse user-supplied YAML input using the load function from the 'js-yaml' package versions below 2.0.5, specifying a self-executing function allows us to execute arbitrary javascript code. This Metasploit module demonstrates that behavior. This file is part of the...

Mental JS Sandbox Bypass

Title: Mental JS Sandbox Bypass Product: Mental JS Author: Rafay Baloch And Gliuseppe Trotta @guitro Company: RHAINFOSEC Website: http://services.rafayhackingarticles.net ============ Description ============ Mentaljs is a js sandbox created by Gareth Heyes, the JS sandbox is inserted at beginnin...

PT-2013-3369

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 Thunderbird versions prior to 24.0 SeaMonkey versions prior to 2.21 Description The issue is related to a use-after-free vulnerability in the JS GetGlobalForScopeChain function. This vulnerability allows...

CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE

Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Content Spoofing, Cross-Site Scripting and Full Path...

Talking about my company for security emergency response-vulnerability warning-the black bar safety net

0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...

WordPress Comment Extra Fields 1.7 CSRF / XSS

Description : Wordpress Plugins - Comment Extra Fields XSRF/XSS Injection : http://site/wordpress/wp-content/plugins/comment-extra-field/scripts/swfupload.swf?movieName=";catcheif!self.aself.a=!alert'XSS';//...

CVE-2013-2209

Cross-site scripting XSS vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name...

Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability

Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...

WordPress JS Restaurant Plugin SQLi Vulnerability - Active Check

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress JS Restaurant SQL Injection

Exploit Title : Wordpress JS Restaurant Plugin SQL Injection Vulnerability Author : Ashiyane Digital Security Team Security Risk : HIgh Google Dork : inurl:/wp-content/plugins/js-restaurant/popup.php?restuarantid= Location:site/path/wp-content/plugins/js-restaurant/popup.php?restuarantid=SQLi DEm...

CVE-2013-4660

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...