CVE-2015-8398

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to rest/prototype/1/session/check...

Rest API XSS

An unauthenticated XSS vulnerability has been confirmed in confluence 5.8.15 and 5.8.14. The vulnerability is located at /rest/prototype/1/session/check/something POC URL: http:///confpath/rest/prototype/1/session/check/something%3Cimg%20src%3da%20onerror%3dalert%280%29%3E This was confirmed in t...

DFLabs PTK <= 1.0.5 - Multiple Vulnerabilities (Steal Authentication Credentials)

No description provided by source. +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : DFLabs PTK = 1.0.5 Multiple Vulnerabilities Steal Authentication Credentials Date : 22-02-2012...

VICIdial Manager Send OS Command Injection

The file agc/managersend.php in the VICIdial web application uses unsanitized user input as part of a command that is executed using the PHP passthru function. A valid username, password and session are needed to access the injection point. Fortunately, VICIdial has two built-in accounts with...

Samsung DVR authentication bypass

Title: Samsung DVR authentication bypass Version affected: firmware version = 1.10 Vendor: Samsung - www.samsung-security.com Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched Samsung provides a wide range of DVR...

DFLabs PTK 1.0.5 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : DFLabs PTK = 1.0.5 Multiple Vulnerabilities Steal Authentication Credentials Date : 22-02-2012 Author : Ivano Binetti...

DFLabs PTK <= 1.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : DFLabs PTK = 1.0.5 Multiple Vulnerabilities Steal Authentication Credentials...

Web Wiz NewsPad 1.02 (sub) Remote Directory Traversal Vulnerability

Exploit for unknown platform in category web applications =================================================================== Web Wiz NewsPad 1.02 sub Remote Directory Traversal Vulnerability =================================================================== AmnPardaz Security Research Team Titl...

MailWorks.txt

Pimp industries. "Its all about the Bling, B^!%@s and Fame!" MailWorks Professional All versions Authentication bypass via cookie control C Paul Craig - Pimp Industries 2004 Background ------------- MailWorks Professional is a mailing list management application, developed by sitecubed. It provid...