2073 matches found
spider_man
This plugin is a local proxy that can be used to give the framework knowledge about the web application when it has a lot of client side code like Flash or Java applets. Whenever a w3af needs to test an application with flash or javascript, the user should enable this plugin and use a web browser...
digit_sum
This plugin tries to find new URLs by changing the numbers that are present on it. Two configurable parameters exist: fuzzImages maxDigitSections An example will clarify what this plugin does, lets suppose that the input for this plugin is: http://host.tld/index1.asp This plugin will request:...
sqli
This plugin finds SQL injections. To find this vulnerabilities the plugin sends the string dz"0 to every injection point, and searches for SQL errors in the response body. Plugin type Audit Options This plugin doesnt have any user configured options. Source For more information about this plugin...
[SECURITY] Fedora 19 Update: kjumpingcube-4.10.4-1.fc19
KJumpingCube is a simple tactical game. You can play it against the computer or a friend. The playing area consists of squares containing points. When t he game starts each square has only one point, and no owner. Players move by clicking on either a vacant square or one of their own squares, thu...
[SECURITY] Fedora 19 Update: kiriki-4.10.4-1.fc19
Kiriki is an addictive and fun dice game for KDE, designed to be played by as many as six players. Participants have to collect points by rolling five di ce for up to three times per single turn. Each roll generates a specific combination of numbers which the player is free to either accept or...
[SECURITY] Fedora 19 Update: kapman-4.10.4-1.fc19
Kapman is a collecting game. You must go through the levels escaping ghosts in a maze. You lose a life when a ghost eats you, but you can eat the ghosts for a few seconds when eating an energizer. You win points when eating pills, energizers, and bonus, and you win one life for each 10,000 points...
jeecms官方论坛逻辑与定向xss
简要描述： 逻辑错误。外加N个 XSS跨站 详细说明： http://bbs.jeecms.com 登陆了以后有一个积分。在积分兑换的时候。出现了逻辑错误。我没太仔细看代码。应为你们论坛不停的弹窗。烦 附送一个xss指定用户的漏洞 漏洞证明： img src="https://images.seebug.org/upload/201305/09152003d9c607aeef924ed9219cee8c64cc742d.jpg" alt="4.jpg" width="...
CVE-2013-2290
Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...
Cross site scripting
Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...
CVE-2013-2290
Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...
CVE-2013-2290
CVE-2013-2290 is a Cross-site Scripting (XSS) vulnerability in the ArubaOS Administration WebUI dashboard used by Mobility Controller. The issue allows an attacker to inject arbitrary web script or HTML via a crafted SSID, affecting ArubaOS 6.2.x before 6.2.0.3; 6.1.3.x before 6.1.3.7; 6.1.x-FIPS...
PT-2013-3439 · Mariadb +2 · Mariadb +3
Name of the Vulnerable Software and Affected Versions: MariaDB versions 5.1.x through 5.1.67 MariaDB versions 5.2.x through 5.2.14 MariaDB versions 5.3.x through 5.3.12 MariaDB versions 5.5.x through 5.5.29 Oracle MySQL versions 5.1.x through 5.1.69 Oracle MySQL versions 5.5.x through 5.5.31 Orac...
Part of the Discuz! The forum user can be any brush points-vulnerability warning-the black bar safety net
For some Discuz! Forum on the promotion visit this place not paying attention so the user can be any brush Forum user points and levels First click on the promotion to access ! You can see this interface “If you have a friend by one of the following links to access the site, you will get reward...
TP-Link access points multiple security vulnereabilities
Multiple web interface vulnerabilities...
Edimax access points multiple security vulnerabilities
Multiple web interface vulnerabilities...
CVE-2013-1131
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and...
Code injection
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and...
CVE-2013-1131
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 are affected by CVE-2013-1131 due to improper SSID validation during site surveys. An unauthenticated attacker on an adjacent network can craft an SSID to trigger a DoS condition and may, per Cisco, potentially overw...
Cisco Small Business Wireless Access Points SSID Validation Vulnerability
Cisco Small Business Wireless Access Points contain a vulnerability that could allow an unauthenticated, adjacent attacker cause a denial of service DoS condition. The vulnerability is due to improper validation of the Service Set Identifier SSID when the affected product is performing a "site...