571 matches found
WordPress Recent Comments Plugin <= 2.0.6 - XSS
Because of this vulnerability in the core.php, the attackers can inject arbitrary web script or HTML via the "page" parameter. Solution Update the plugin...
WordPress Recent Comments Plugin <= 2.0.6 - SQL injection
Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "id" parameter. Solution Update the plugin...
Coalfire in the News
Its been quite a season in the world of IT security as we move into 2012. As experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we have had to say recently:...
LabWiki 1.1 Cross Site Scripting / Shell Upload
------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo'...
apache recent ddos vulnerability solution-exploits warning-the black bar safety net
apache the recentddosvulnerability solution Original: Jeacen Methods: RewriteEngine on RewriteCond %HTTP:range ! ^bytes=^,+,^,+0,4$|^$ RewriteRule . - F...
Aviv Raff on the Evolution of Exploit Kits
In this video, via Kaspersky’s Lab Matters, Ryan Naraine and Seculert’s Aviv Raff discuss the evolution of exploit kits and the recent merger of Spyeye and Zeus...
NERC - National Syrian energy research center Defaced by Cocain Team
NERC - National Syrian energy research center Defaced by Cocain Team Cocain Hackers Team once again Hit Syrian. This time they hack and deface the website of National Syrian energy research center. Site was defaced Yesterday and administrator again backup the site, But Readers can check hack mirr...
Fedora Update for libvirt FEDORA-2011-9062
Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2011-9062 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
vBulletin CMS 4.1.1 Recent Articles Cross Site Scripting
============================================================ vBulletin 4 CMS Recent Articles widget XSS Vulnerability ============================================================ Title : vBulletin 4 CMS Recent Articles widget XSS Vulnerability Software : http://www.vbulletin.com Tested on : versi...
THC-HYDRA v6.4 - Fast network logon cracker
THC-HYDRA v6.4 - Fast network logon cracker THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from remote...
This Week: Coalfire Systems in the News
Its been quite a week in the world of IT security, and as experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we had to say recently:...
Super Saturday : The Hacker News Featured Articles, If you miss Something !
Super Saturday : The Hacker News Featured Articles, If you miss Something ! Let's Re-collect all the Featured Recent Interesting Articles of THN, in this post. Hope you Guys will like every news By us. Please share the Links on your Facebook/ Re-tweet on Twitter and everywhere to spread the Cyber...
WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting
WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting source: https://www.securityfocus.com/bid/47579/info The WP Ajax Recent Posts WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...
WordPress Ajax Recent Posts Plugin 1.0.1 - Cross-Site Scripting
WordPress Ajax Recent Posts plugin's "do" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
Cross-site Scripting (XSS) Vulnerability in WP-Ajax-Recent-Posts
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP-Ajax-Recent-Posts which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP-Ajax-Recent-Posts The vulnerability exists due to input sanitation error in the "number"...
CVE-2011-0266
creationtimestamp| type| source ---|---|--- 2011-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17028 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmnnmrptconfignameparams.rb 2025-02-06...
Windows Gather Dump Recent Files lnk Info
The dumplinks module is a modified port of Harlan Carvey's lslnk.pl Perl script. This module will parse .lnk files from a user's Recent Documents folder and Microsoft Office's Recent Documents folder, if present. Windows creates these link files automatically for many common file types. The .lnk...
AVIPreview 0.26 Alpha Denial Of Service
done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7 DoS is caused by Access Violation...
CVE-2011-0647
creationtimestamp| type| source ---|---|--- 2011-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41704 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/emc/replicationmanagerexec.rb 2025-02-06 03:13:40+00:00|...
MyBB 1.6.2 Stored XSS Vulnerability
Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...