Oracle E-Business Suite (EBS) Detection (HTTP)

HTTP based detection of Oracle E-Business Suite EBS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in Love Channel Music V10.01 System logo.php Page

Love Channel Music System is an audio-visual management system developed using php+Mysql. An SQL injection vulnerability exists in the logo.php page of the Love Channel Music V10.01 system. The lack of filtering of the 'cdid' parameter allows attackers to exploit the vulnerability to obtain...

WordPress Admin Custom Login 2.4.5.2 Cross Site Scripting

------------------------------------------------------------------------ Admin Custom Login WordPress plugin affected by persistent Cross-Site Scripting via Logo URL field ------------------------------------------------------------------------ Burak Kelebek, July 2016...

PHP Logo Designer Script Arbitrary File Upload

Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo: http://phplogodesigner.000webhostapp.com/ Version: N...

PHP Logo Designer Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo...

PHP Logo Designer Script - Arbitrary File Upload

PHP Logo Designer Script - Arbitrary File Upload Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo:...

PHP Logo Designer Script - Arbitrary File Upload

Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo: http://phplogodesigner.000webhostapp.com/ Version: N...

Target Device hangs at Black screen or Windows Logo indefinitely

During the early stages of a Target Device boot process, it hangs indefinitely at a Black Screen or just before showing the Windows Logo. Depending on how many Target Devices are booting at a time, the affected Target might finally finish booting after 30 to 60 minutes. In some cases the Target...

Cross-site scripting vulnerability in wordpress plugin post-logo

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wordpress plugin post-logo due to improper filtering of user input, which...

Open-Xchange: Set Cookie Via SVG

Summary: ======== An attacker could set any cookie to the victim via svg file that he uploads as his profile picture. Steps to reproduce: ============== 1. My contact Detail. 2. Upload the given svg file as profile picture and save. 3. Logout and Clear all the cookie. 4. Login with victim's...

Check Out My TeePublic Designs

Over the years fans of this blog have asked if I would consider selling merchandise with the TaoSecurity logo. When I taught classes for TaoSecurity from 2005-2007 I designed T-shirts for my students and provided them as part of the registration package. This weekend I decided to exercise my...

StoreFront Header Branding Logo Display shows distorted when zoom is applied to browser (chrome, IE, Edge, Firefox)

When a custom logo is applied to a StoreWeb in Storefront 3.x and zoom feature on browser is used, the logo will be cut off and will not be displayed properly. This behavior can be seen in multiple browser versions...

Harvest: PM can delete the company logo image (Vertical Privilege Escalation )

Hi Team, Description : Only Admin can Delete the Company Logo image In company account on harvestapp.But the Deleting Logo HTTP request doesn't validate the Access of the user properly and a Project managerLimited access to Company Settings can Delete the Logo image of the company. Vulnerable HTT...

Nextcloud: Arbitrary File Upload in Logo & Log in image Theming setting.

Hi team First I think this vulnerability doesn't fall at your bug bounty program but this is a bad design that should fix right now cause if an attacker get admin access he still can upload a malicious file in client server side. I saw that Logo & Log in image allow to upload other files type...

OLX: XSS on Home page olx.com.ar via auto save search text

Hi guys, I found XSS vulnerability on Home page olx.com.ar via auto save search text 1. Copy full link and go to the URL in browser: https://www.olx.com.ar/nf/search/xss%22-'%20%22%3E%3Ciframe/src%20////onload%20=%20alertdocument.cookie%20onerror=alertdocument.cookie 2. Click logo button go back ...

Threat Outbreak Alert RuleID22130: Email Messages Distributing Malicious Software on April 7, 2016

Medium Alert ID: 44549 First Published: 2016 April 7 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22130 may contain the following files: Name | Siz...

Cars Logo Quiz - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cars Logo Quiz published at the 'play' market has multiple vulnerabilities...

Guess the Brand! - Logo Quiz - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Brand! - Logo Quiz published at the 'play' market has multiple vulnerabilities...

Logo Quiz Fun Plus - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Logo Quiz Fun Plus published at the 'play' market has multiple vulnerabilities...

Guess the Shadow! ~ Logo Quiz - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Shadow! Logo Quiz published at the 'play' market has multiple vulnerabilities...