Ninja Blog 4.8 - Multiple Vulnerabilities

No description provided by source...

ColdBookmarks 1.22 SQL Injection Vulnerability

No description provided by source. ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

Ninja Blog 4.8 - Remote Information Disclosure Vulnerability

No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alt...

CVE-2014-4017

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

CVE-2014-4017

CVE-2014-4017 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Conversion Ninja . The flaw allows remote attackers to inject arbitrary script or HTML by supplying a crafted value to the id parameter of lp/index.php . Multiple connected sources confirm this is an XSS issue in ...

WordPress Conversion Ninja Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to lp/index.php. Solution Update the plugin...

CVE-2014-4017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

PT-2014-5676

Name of the Vulnerable Software and Affected Versions Conversion Ninja plugin for WordPress affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the id parameter to...

WordPress Conversion Ninja 'id' Parameter Cross Site Scripting Vulnerability

WordPress Conversion Ninja Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Conversion Ninja Cross Site Scripting

++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date: 2014-05-22 + + Google Dork : inurl:wp-content/plugins/conversionninja + + Vendor Homepage : http://www.Wordpress.org + + Tested on: Window...

Shortcode Ninja <= 1.4 - Unauthenticated Reflected XSS

The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/shortcode–ninja/preview-shortcode-external.php?shortcode=shortcode%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...

Shortcode Ninja <= 1.4 - Unauthenticated Reflected XSS

The last time it was checked the plugin was still affected and had been closed. http://www.example.com/wp-content/plugins/shortcode–ninja/preview-shortcode-external.php?shortcode=shortcode%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...

op5 Monitor < 6.1.0 Information Disclosure and Security Bypass Vulnerabilities

The version of op5 Monitor hosted on the remote web server is earlier than 6.1.0. It is, therefore, affected by the following information disclosure and security bypass vulnerabilities: - Log files can be accessed without authentication, which may contain sensitive information. Bug 6599 - A flaw...

Facebook Game - Fruit Ninja Frenzy Detected (deprecated)

Binary data 6422.prm...

Fraud communities owned and exposed by Happy Ninja

Fraud communities owned and exposed by Happy Ninja The Happy Ninjas Hackers Release a Ezine "Owned and Exposed - ISSUE no 3" on Exploit-Db. They claim to hack various German and International fraud scenes and Publish there all details online in Ezine. They said "Operation Antisec : The original...

Fraud communities owned and exposed by Happy Ninja

Fraud communities owned and exposed by Happy Ninja The Happy Ninjas Hackers Release a Ezine "Owned and Exposed - ISSUE no 3 " on Exploit-Db. They claim to hack various German and International fraud scenes and Publish there all details online in Ezine. They said "Operation Antisec : The original...

BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

Huwshimi.com's Fail Ninja

It’s always so easy to blame the ninjas, isn’t it? Still, we’ve gotta give props to the anime-inspired custom 404 error page for this Sydney, Australia based Web design firm, which claims that “A ninja stole this page.” Visitors are encouraged to “return when the moon has friends and the fox is...

Concrete CMS v5.4.1.1 XSS/Remote Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth...