Lead Capture Page System Authentication Bypass

Lead Capture Page System Authentication Bypass Vulnerability Software : Lead Capture Page System Date : 1/12/2012 Vendor : http://leadcapturepagesystem.com Get App. : http://leadcapturepagesystem.com/order.php?id=1 Price : $235 Dork : intext:"Powered By Lead Capture Page System" Author : ITTIHACK...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an...

Lead Capture Page System Authentication Bypass Vulnerability

Exploit for php platform in category web applications Lead Capture Page System Authentication Bypass Vulnerability Software : Lead Capture Page System Date : 1/12/2012 Vendor : http://leadcapturepagesystem.com Get App. : http://leadcapturepagesystem.com/order.php?id=1 Price : $235 Dork :...

Design/Logic Flaw

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

Cross Site Scription Vulnerability in vBulletin 4.1.3, 4.1.4 and 4.1.5

Advisory Information Title: vBulletin Cross Site Scripting Vulnerability Vendors contacted: vBulletin team ---- Vulnerability Information Class: XSS flaw Vulnerable page: Admin Login Page admincp Remotely Exploitable: Yes ---- Vulnerability Description vBulletin is a community forum solution for ...

vBulletin 4.1.3pl3 / 4.1.4pl3 / 4.1.5pl1 Cross Site Scripting

Advisory Information Title: vBulletin Cross Site Scripting Vulnerability Date published: 02-08-2011 Vendors contacted: vBulletin team Vulnerability Information Class: XSS flaw Vulnerable page: Admin Login Page admincp Remotely Exploitable: Yes Locally Exploitable: No Vulnerability Description...

LeadTools ActiveX common dialogs 16.5 - Multiple Vulnerabilities

LeadTools ActiveX common dialogs 16.5 - Multiple Vulnerabilities LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital...

Leadtools ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities

Exploit for windows platform in category dos / poc ===================================================================== Leadtools ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities ===================================================================== LEADTOOLS ActiveX Common Dialogs 16....

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow (PoC)

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow PoC LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control a...

LeadTools ActiveX Raster Twain 16.5 - 'LtocxTwainu.dll' Buffer Overflow (PoC)

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

Leadtools ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Buffer Overflow

Exploit for windows platform in category dos / poc ====================================================================== Leadtools ActiveX Raster Twain v16.5 LtocxTwainu.dll Buffer Overflow ====================================================================== LEADTOOLS ActiveX Raster Twain v16....

Joomla Lead SQL Injection

TR Title: Joomla Component comlead SQL Injection TR Date: 03.06.2010 TR Author: ByEge TR Homepage: byege.blogspot.com TR Vendor: http://www.leadya.co.il/ TRTurkishPalestineDefacerDownisraelTR TRTurkishPalestineDefacerDownisraelTR TR ExploiT : TR...

CPA Lead Script SQL Injection

In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabilities Vendor: www.v-eva.com + Software: CPA Lead Script + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ----4.!.5 ? contact: Xathotmail.co.jp - ? Date: 14.Jan.2010 ? T!ME: 05:15 am GMT ? Home: © Offensive Security ?...

SuSE Update for acroread SUSE-SA:2010:022

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

JQL not respecting Issue Security Level "Project Lead"

While writing TestIssueSecurityLevel I found the following problem: fred is not a Project Lead HSP-3 has Issue Security Level of "Project Lead" only. empty JQL to show all visible issues doesn't show HSP-3. make fred the Project Lead same query: still no HSP-3 however: fred can browse to HSP-3 an...

Unfixed XSS vulnerability at www.giorgiotave.it

Security researcher kript0, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.giorgiotave.it, which at the time of submission ranked 7522 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is current...

PPStream 2.1.16.1003 overflow-vulnerability warning-the black bar safety net

/ PPStream PowerList. ocx 2.1.6.2916 Description: SetBkImage heap and stack overflows, or before the old problems. The previous patch is a PowerPlayer. dll Here the use of the heap overflow and stack overflow, using CFindFile for parameter checking is not strict, resulting in a heap overflow. In...