11989 matches found
[SECURITY] Fedora 18 Update: python-djblets-0.7.18-1.fc18
A collection of useful classes and functions for Django...
mod_accounting Module 0.5 - Blind SQL Injection
Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Eldar "Wireghoul" Marcussen - CVE Identifier:...
HPE Network Node Manager i (NNMi) Detection (credentialed check)
HPE Network Node Manager i NNMi is installed on the remote Windows host. NNMi is a component of HPE Automated Network Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70145; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...
Target Longlife Media Player 2.0.2.0 - .wav Crash (PoC)
Target Longlife Media Player 2.0.2.0 - .wav Crash PoC Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link :...
CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE
Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Content Spoofing, Cross-Site Scripting and Full Path...
CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities
Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected Version : 1.8 & Anteriores. Contacts...
Convert the SecurityHeadersInterceptor into a filter that applies to /*
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-30356. panel The X-XSS-Protection HTTP header should be sent on all responses with a value of "1; mode=block". As the current...
Convert the SecurityHeadersInterceptor into a filter that applies to /*
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-30356. panel The X-XSS-Protection HTTP header should be sent on all responses with a value of "1; mode=block". As the current...
Several Malicious Android apps found on Google Play affects 25,000 devices
As time goes on, though, the Malware Risk on Mobile Platforms appears to be increasing. A flood of scammy apps that are difficult for Google to detect, and therefore stays available for download for several days before being removed. The Russia-based firm Dr Web today said it has discovered sever...
D-Link Devices Unauthenticated Remote Command Execution Vulnerability
Different D-Link Routers are vulnerable to OS command injection via the web interface. The vulnerability exists in toolsvct.xgi, which is accessible with credentials. This Metasploit module has been tested with the versions DIR-300 rev A v1.05 and DIR-615 rev D v4.13. Two target are included, the...
Brick7 Search Engine Cross Site Scripting
=========================================================== © brick7 2013 Remote code execution XSS =========================================================== Author:Raul DiazDshellnoi Unix Product: Brick7 search engine Web:http://www.brick7.com Versions: N/A Date: 01/06/2013 Vendor Notified:...
WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery
WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint...
[SECURITY] Fedora 17 Update: kde-workspace-4.10.5-3.fc17
The KDE Workspace consists of what is the desktop of the KDE Desktop Environment. This package contains: khotkeys a hotkey daemon klipper a cut & paste history utility kmenuedit the menu editor krunner a command run interface kwin the window manager of KDE plasma the KDE desktop, panels and widge...
OpenEMM-2013 8.10.380.hf13.0.066 Cross Site Scripting / SQL Injection
import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file:...
Windows RT ARM - Bind Shell Port 4444
Windows RT ARM - Bind Shell Port 4444. Shellcode exploit for arm platform ; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tabl...
[SECURITY] Fedora 18 Update: kcolorchooser-4.10.5-1.fc18
A color chooser...
SDCMS某处设计缺陷导致遍历任意文件内容
简要描述： SDCMS某处设计缺陷导致遍历任意文件内容 详细说明： 1、首先看看缺陷文件： 文件/sdcms/admin/sdtheme.asp ...... 第138行： case "edit" dim filename:filename=sdcms.fget"filename",0 if notsdcms.checkstrfilename,"filename" then sdcms.echo "filename is wrong" sdcms.die end if if notsdcms.isfile"../theme/"&filename then sdcms.echo...