Mountain Internet CMS Cross Site Scripting

Exploit Title : mountaininternet Cms Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://mountaininternet.com Security Risk : High Version : All Version Tested on : GNU/Lin...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 106413 High CVE-2011-3078: Use after free in floats handling. Credit to Google Chrome Security Team Marty Barbella and independent later discovery by miaubiz. 117627 Medium CVE-2011-3079: IPC validation failure. Credit to PinkiePie. 121726 Medium CVE-2011-3080: Rac...

WordPress WPsc-MijnPress Cross Site Scripting

Exploit Title : Wordpress WPsc-MijnPress plugin Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://wordpress.org/extend/plugins/wpsc-mijnpress/ Security Risk : High Versio...

vBulletin 4.1.10 Local File Inclusion

Exploit Title : Vbulletin 4.1.10 functionscron.php Local file Include Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://vbulletin.com Security Risk : High Version : All Version Tested on :...

FlirtPortal Script SQL Injection / Cross Site Scripting

Exploit Title : FlirtPortal Script Multiple Vulnerabilities Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Demo : www.scripte24shop.de/demo/flirtportal Contact : [email protected] , [email protected] Security Risk : High...

Pinnacle Pixel CMS SQL Injection

Exploit Title : Pinnacle Pixel CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.pinnaclepixel.com Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered ...

Maxxweb CMS Cross Site Scripting

Exploit Title : maxxweb Cms Cross Site Scripting Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Vendor : http://maxxweb.de Contact : [email protected] , [email protected] Security Risk : Low DorK : "maxxweb.de Internet-Dienstleistunge...

Gold Coast Web Design SQL Injection

Exploit Title : Gold Coast Web Design Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : http://goldcoastwebdesign.com Contact : [email protected] , [email protected] Security Risk : High Dork ...

DreamArticle CMS 2.0 Cross Site Scripting

Exploit Title : DreamArticle CMS Cross Site Scripting Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered by DreamArticle V2.0"...

Axous 1.1.0 - SQL Injection

Axous 1.1.0 - SQL Injection Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected] Security Risk : Hi...

Axous 1.1.0 SQL Injection

Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected] Security Risk : High DorK : intext:"Powered by...

Uiga FanClub SQL Injection

Exploit Title : Uiga FanClub Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.uiga.com Contact : [email protected] , [email protected] Security Risk : High Dork : intitle:"Uiga FanClub"...

GO Infoteam Solution CMS SQL Injection

Exploit Title : GO INFOTEAM solution CMS Blind SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Contact : [email protected] , [email protected] Portal Link : www.goinfoteam.it Security Risk : High DorK : "Powered by GO...

BBSXP CMS SQL Injection

Exploit Title : BBSXP CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.bbsxp.com/download.htm Contact : [email protected] , [email protected] Security Risk : High DorK :...

Axous 1.1.0 - SQL Injection

Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected] Security Risk : High...

[SECURITY] [DSA 2454-2] openssl incomplete fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2454-2 [email protected] http://www.debian.org/security/ Raphael Geissert April 24, 2012 http://www.debian.org/security/faq -...

SA-CONTRIB-2012-065 - Sitedoc - Information disclosure

CVE: CVE-2012-2302 This module enables you to display a plethora of information about your site's structure. Optionally, the information may be saved into a file for later comparison. The module doesn't sufficiently verify that the saved file is protected by the Private File System. This...

SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS)

CVE: CVE-2012-2297 The Creative Commons module allows users to select and assign a Creative Commons license to a node and any attached content, or to the entire site. The module did not sufficiently filter the text describing licenses. This vulnerability is mitigated by the fact that an attacker...

OpenSSL 1.0.1 ASN1 BIO Vulnerability

Exploit for multiple platform in category remote exploits OpenSSL Security Advisory 19 Apr 2012 ======================================= ASN1 BIO vulnerability CVE-2012-2110 ======================================= A potentially exploitable vulnerability has been discovered in the OpenSSL function...

Debian DSA-2454-2 : openssl - multiple vulnerabilities

Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2012-0884 Ivan Nestlerode discovered a weakness in the CMS and PKCS 7 implementations that could allow an attacker to decrypt data via a Million Message...