WordPress Plugin WP-UserOnline Persistent XSS vulnerability

This perl exploit I've developed at 26.04.2010. As I've wrote earlier, vulnerable are WP-UserOnline 2.62 and previous versions. After my informing the developer released WP-UserOnline 2.70 at 07.05.2010. In version 2.70 he fixed XSS, but not Full path disclosure vulnerabilities. Hello list! in 20...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Enterpriser16 Load Balancer 7.1 - Multiple Cross-Site Scripting Vulnerabilities

Enterpriser16 Load Balancer 7.1 - Multiple Cross-Site Scripting Vulnerabilities Title: ====== Enterpriser16 Load Balancer v7.1 - Multiple Web Vulnerabilities Date: ===== 2012-12-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=785 VL-ID: ===== 785 Common Vulnerability...

SonicWALL SonicOS 5.8.1.8 WAF - Cross-Site Scripting

SonicWALL SonicOS 5.8.1.8 WAF - Cross-Site Scripting Title: ====== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability Date: ===== 2012-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 VL-ID: ===== 769 Common...

Cisco VoIP Hacker Urges Closer Look at Firmware Security Vulnerabilities

Ang Cui’s “Funtenna” is just the latest eye-opener into the security of embedded networked devices such as printers, VoIP phones, routers and other core, connected infrastructure. The Columbia University PhD candidate’s recent hack of a Cisco-branded VoIP phone demonstrates the risk posed by...

SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

SonicWall SonicOS 5.8.1.8 WAF Cross Site Scripting

Title: ====== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability Date: ===== 2012-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=769 Sonicwall Bug ID SBID: 123995 VL-ID: ===== 769 Common Vulnerability Scoring System: ==================================== 3....

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0...

MyBB Xbox Live ID Post SQLi & Persistent XSS Vulnerabilities

Exploit for php platform in category web applications MyBB Xbox Live ID Post SQLi & Persistent XSS This a really easy one to exploit, user input is not sanitized at all and so is injected into the database as the following lines: if isset$mybb-input'xli' $xli-userupdatedata'xli' = $mybb-input'xli...

Cisco Wireless Lan Controller 7.2.110.0 Multiple Vulnerabilities

Exploit for hardware platform in category dos / poc Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u email protected? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...

Cisco Wireless Lan Controller 7.2.110.0 XSS / CSRF / DoS

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

MyBB AJAX Chat - Persistent Cross-Site Scripting

MyBB AJAX Chat - Persistent Cross-Site Scripting Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability li...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst...

MyBB ChangUonDyu Extra File Chatbox Persistent XSS Vulnerability

Popular inferno-like chatbox built for MyBB! ChangUonDyu Extra File Chatbox Persistent XSS Location: Chatbox Notice Vendor: http://community.mybb.com/thread-63559.html PoC: function buildnotice global $fcbfile,$smilies; $noticef = filegetcontents$fcbfile'notice'; $handle =...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB AJAX Chat - Persistent Cross-Site Scripting

Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability lies within the chatframe.php page. Persistent /...