Cross-Site Request Forgery (CSRF)

oauth-libre is vulnerable to cross-site request forgery attacks. The vulnerability exists because it does not incorporate state parameter logic in authorization...

Factux LFI Vulnerability

No description provided by source. InformatioN Title : Factux LFI Vulnerability Author: altbta l9athotmail.com download : http://www.toocharger.com/telecharger/scripts/factux/3468.htm ExploiT dork: Factux le facturier libre V 1.1.5 includeonceinclude/language/$lang.php; Vulnerable File :...

Mayan-EDms Web-Based Document Management OS System - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple Stored XSS Software: Maya EDMS Software Link: http://www.mayan-edms.com/downloads/Mayan%20EDMS%20v0.13.ova Version: 0.13 - latest Author: Dolev Farhi, email: dolevatopenflaredotorg @f1nhack Date: 21.5.2014 Tested on: Kali Linux Vendor homepage: www.mayan-edms.com 1. About...

libreoffice: Integer overflows, leading to heap-buffer overflows in JPEG, PNG and BMP reader implementations

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

Unfixed XSS vulnerability at www.bna.com.tn

Security researcher Electr0n Libre, has submitted on 28/12/2010 a cross-site-scripting XSS vulnerability affecting www.bna.com.tn, which at the time of submission ranked 1439724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

KDELibs 4.3.3 Remote Array Overrun

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE KDELibs 4.3.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - KDELibs...

mercadolibre-xssrfi.txt

www.nullcode.com.ar +========================================================================================+ + Mercadolibre.com security compromised with XSS/ RFI /Phishing flaws + +========================================================================================+ Authors: Ivan Sanchez...

Unfixed XSS vulnerability at balls.buenosaireslibre.org

Security researcher C1c4Tr1Z, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting balls.buenosaireslibre.org, which at the time of submission ranked 447521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/03/2008. I...