IP.Gallery 4.2.x5.0.x - Persistent Cross-Site Scripting

IP.Gallery 4.2.x5.0.x - Persistent Cross-Site Scripting Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability Date: 8/2/2013 Exploit Author: Mohamed Ramadan Author HomePage: http://www.Attack-Secure.com Author Twitter : https://twitter.com/AttackSecure Vendor Homepage:...

IP.Gallery 4.2.x/5.0.x - Persistent Cross-Site Scripting

Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability Date: 8/2/2013 Exploit Author: Mohamed Ramadan Author HomePage: http://www.Attack-Secure.com Author Twitter : https://twitter.com/AttackSecure Vendor Homepage: http://www.invisionpower.com/ Software Link:...

Etsy for iPhone loophole allows attacker to hijack Accounts

Mohamed Ramadan from Attack-Secure discovered a critical vulnerability in Etsy's iPhone application. Etsy is a social commerce website focused on handmade or vintage items as well as art and craft supplies. Any attacker on the same network can sniff traffic including user password invisibly witho...