11989 matches found
PHPWind flash xss 0day？
简要描述： 突然发现的，在乌云上一搜，是insight-labs提交了的一个，官方回复已经修复，但是修复不完整。 详细说明： 在测试其他网站时，发现了这个flash文件，看了下代码， ExternalInterface.callthis.jQuery, "jPlayerFlashEvent", arg0.type, this.extractStatusDataarg0.data; 搜索jquery： this.jQuery = loaderInfo.parameters.jQuery + "'" + loaderInfo.parameters.id + "'.jPlayer";...
Debian DSA-2668-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-2121 Benjamin Herrenschmidt and Jason Baron discovered...
Linux Kernel < 3.8.x - open-time Capability 'file_ns_capable()' Local Privilege Escalation
/ usernsrootsploit.c by / / Copyright c 2013 Andrew Lutomirski. All rights reserved. / / You may use, modify, and redistribute this code under the GPLv2. / define GNUSOURCE include include include include include include include include include include include include include ifndef CLONENEWUSER...
Wireless Disk PRO 2.3 iOS - Multiple Vulnerabilities
Title: ====== Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities Date: ===== 2013-02-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=883 VL-ID: ===== 883 Common Vulnerability Scoring System: ==================================== 6.2 Introduction: =============...
ABBS Audio Media Player v3.1 (.lst) Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: ABBS Audio Media Player v3.1 .lst Buffer Overflow Version: v3.1 Date: 2013-05-04 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://abbs.qsnx.net/ Tested on: Windows XP SP...
Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities
Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Vanilla Forums where 1337 is the id. Bookmark CSRF: http://site.org/index.php=/vanilla/discussion/bookmark/1337 UnBookmark CSRF http://site.org/index.php=/vanilla/discussion/bookmark/1337?...
Lxblog blog system variables cover the resulting injection+Getshell attached to the use of the exp-bug warning-the black bar safety net
Nonsense: lxblog is www. phpwind. net development of multi-blog system, now seems to have stopped updating! Statement: We only do the technical research, please do not illegally used, together with consequences with himself, independent of it! Text: Key file:/mod/ajaxmod.php if ! empty$POST $POST...
WHMCS Grouppay 1.5 SQL Injection
Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...
dedecms chicken was injected with the details of the analysis process-exploit warning-the black bar safety net
One of the secondary injection because of the word limit, so is particularly tasteless. In addition, I wish you all a Happy New Year ：） Detailed description: 2 3 3 extract$arcRow, EXTRSKIP; 2 3 4 $msg = cnsubstrRTrimMsg$msg, 1 0 0 0; 2 3 5 $username = cnsubstrRHtmlReplace$username, 2, 2 0; 2 3 6...
ClipShare 4.1.4 - Multiple Vulnerabilities
ClipShare 4.1.4 - Multiple Vulnerabilities ===================================================================== Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. Vulns: Blind SQl injection && Plaintext...
Microsoft OneNote Detection (Windows SMB Login)
Detects the installed version of Microsoft OneNote. The script logs in via smb, and detect the version of Microsoft OneNote on remote host and sets the KB. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2013-2501
creationtimestamp| type| source ---|---|--- 2013-03-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38373...
Facebook OAuth flaw allows gaining full control over any Facebook account
Facebook OAuth is used to communicate between Applications & Facebook users, to grant additional permissions to your favorite apps. To make this possible, users have to 'allow or accept' the application request so that app can access your account information with required permissions. As a normal...
Cometchat Application - Multiple Vulnerabilities
Exploit for php platform in category web applications meta http-...
Shopping.com API Cross Site Scripting
/ / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Shopping.com Api V3 php Script, XSS Vulnerabilities Software Page: http://en.clicsell.com/script-shopping-v3.html Product Page:...
Cybersecurity Executive Order Short on Action, Long on Voluntary Initiatives
The executive order that President Barack Obama signed yesterday in advance of his State of the Union Address contains a lot of provisions for information sharing on attacks and threats on critical infrastructure, and also calls for the development of a framework to reduce cybersecurity risks in...
Hacker Exposes former US President Bush Family Photos and Emails
The hacker, known as Guccifer, targeted several e-mail accounts and exposed personal photos and sensitive correspondence from members of the former US President Bush family, including both former U.S. presidents. Hacked Emails includes the AOL account of his daughter Dorothy Bush Koch; family...