144 matches found
TaskFreak! 0.5.5 Error.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22537/info TaskFreak! is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Sillaj time tracking tool Authentication Bypass
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j...
[Faraday] Penetration Test IDE
Faraday introduces a new concept IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the...
[SECURITY] [DSA-2393-1] bip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2393-1 [email protected] http://www.debian.org/security/ dann frazier January 25, 2012 http://www.debian.org/security/faq -...
DSA-2393-1 bip - buffer overflow
Bulletin has no description...
Media And Net SQL Injection
Exploit Title: Media & NET Service SQL Injecti0n Vulnerability Date: 29/09/2011 - 23:57 Author: 3spi0n Software Link: http://www.mns.it/site/mns/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "by MNS.it - WebSchool e' un prodotto dinamico e multiutente , per informazioni contatta...
videoDB 3.1.0 SQL Injection
DORK:allinurl:borrow.php?diskid= DORK:allintitle:videodb Vendor: http://www.videodb.net/blog/ $ ----------- | S3C0VERUN | & ------------@ along with this i was able in some sites to determine that you can overwrite the databse contents and also if you look in the source you se there password the...
BigAce 2.7.5 content management system, FCK editor upload vulnerability-vulnerability warning-the black bar safety net
BigAce 2.7.5 content management system, FCK editor upload vulnerability BIGACE is a PHP and MySQL development of Web Content Management SystemCMS. Main or FCK editor problem. Now a lot of the station, would have been quite safe, but with these so-called editor, leading to a Cup. This is a...
Sillaj Time Tracking Tool SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct...
Sillaj time tracking tool - Authentication Bypass
Sillaj time tracking tool - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai...
Sillaj time tracking tool Authentication Bypass
Exploit for php platform in category web applications =============================================== Sillaj time tracking tool Authentication Bypass =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...
Sillaj time tracking tool - Authentication Bypass
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct...
BIGACE CMS 2.5 (username) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
PCTools iAntivirus multiple security vulnerabilities
Protection bypass, invalid behaviour in multiuser environment...
russian-multi.txt
Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...
DEBIAN-CVE-2007-4894
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...
Multi user custom field cannot be used with the assignable user permission
If a multi user custom field is added to JIRA, and the custom field is added to the Assignable User permission, the Assign Issue operation breaks, when trying to gather the list of assignable Users. This is basically because our MultiUserCF is not specific enough and relies to much on the...
WordPress MultiUser crossite scripting PoC
No description provided by source. body onLoad="document.hack.submit" form name="hack" action="http://site/wp-newblog.php" method="post" input type="hidden" name="stage" value="1" input type="hidden" name="weblogid" value='"scriptalertdocument.cookie/script' /form /body...
Vulnerability in WordPress MultiUser
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в WordPress MultiUser. XSS: POST запрос на странице http://site/wp-newblog.php: "scriptalertdocument.cookie/script В поле Username. Уязвим WordPress MultiUser 1.0 и предыдущие версии. Дополнительная информация о...
TaskFreak! 0.5.5 - 'error.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22537/info TaskFreak! is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...