WordPress Sell Download 1.0.16 Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Plugin Sell Download 1.0.16 - Local File Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

WordPress Sell Downloads Plugin 1.0.16 - Local File Disclosure

WordPress Sell Downloads plugin is prone to a local file disclosure vulnerability that allows an attacker to get potentially sensitive information from local files on computers running the vulnerable application. Solution Upgrade the plugin...

WordPress Plugin Sell Download 1.0.16 - Local File Disclosure

WordPress Plugin Sell Download 1.0.16 - Local File Disclosure ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l...

Wordpress Sell Download v1.0.16 Plugin Local File Disclosure Vulnerability

Exploit for php platform in category web applications Dx . Made In Algeria . xZ Title : Wordpress Plugin Sell Download v1.0.16 Local File Disclosure Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : Fil...

sell-android.ru XSS vulnerability

Vulnerable URL: http://sell-android.ru/http://sell-android.ru/catalog?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:33 GMT...

Author Behind Ransomware Tox Calls it Quits, Sells Platform

Earlier this week, when the author behind the crypto-ransomware Locker apologized and released decryption keys for his victims, it seemed like a change of heart, uncharacteristic for an attacker. Now another ransomware creator has also decided to cut his losses and get out of the game – but not...

Webshop Hun 1.062S Cross Site Scripting

Webshop hun v1.062S XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Webshop hun v1.062S /index.php Multiple Parameters XSS Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S Advisory Publication: Mar 04, 2015...

Sell Downloads 1.0.1 - Arbitrary File Disclosure

Due to the lack of sanitation of of user input, it is possible to download arbitrary files from site, under the context of the web server. This could lead to disclosure of server configuration, or other sensitive information...

WordPress Sell Downloads Plugin <= 1.0.1 - Arbitrary File Disclosure

Because of this vulnerability, attackers can download arbitrary files from site, under the context of the web server. Solution Upgrade the plugin...

CVE-2014-5983

The CVE-2014-5983 entry concerns the Android app Threadflip: Buy, Sell Fashion (com.threadflip.android) version 1.1.11, which does not verify X.509 certificates from SSL servers. The underlying issue is a lack of certificate validation, enabling man-in-the-middle attackers to spoof servers and ob...

CVE-2014-5983: Undefined Security Weakness

The Threadflip : Buy, Sell Fashion aka com.threadflip.android application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577

AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...

CVE-2014-5577

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577: Undefined Security Weakness

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PHP-Nuke Sell Module - 'cid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27980/info The 'Sell' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Banner Management Script SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Banner Management Script SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:59$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...

LinkedIn Hack Tool Exposes Users' Emails without Exploiting Any Vulnerability

A Free Chrome, Firefox and Safari web browser plugin floating around the web, called 'Sell Hack' allows users to view the hidden email address of any LinkedIn user, means anyone can grab email addresses that we use for professional purposes. When installed, the 'Sell Hack' plugin will pop up a...