166 matches found
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1636-1)
phpMyAdmin on openSUSE 12.3 and 13.1 was updated to 4.1.14.8. This update fixes one vulnerability. - Security fixes : - PMASA-2014-17 CVE-2014-9218, CWE-661 CWE-400 boo908363 http://www.phpmyadmin.net/homepage/security/PMASA-2014- 17.php - sf4611 security DOS attack with long passwords phpMyAdmin...
APK signature verification bypass-vulnerability warning-the black bar safety net
0x01 Android signature mechanism The APK rename it to zip file, then you can see there's a META-INF folder, inside there are three files, called MANIFEST. MF, CERT. SF and CERT. RSA, which is to use signapk. jar to generate the signature file. 1, the MANIFEST. MF file: The program loops through t...
cn.123tool.chen:commons (=1.0.0), cn.acooly:acooly-auth-google-authenticator (=5.2.1) +681 more potentially affected by CVE-2014-9515 via net.sf.dozer:dozer (>=4.0 <=5.5.1)
net.sf.dozer:dozer MAVEN version =4.0, =1.0.0, =2.1.0 and more Source cves: CVE-2014-9515 Source advisory: SNYK:JAVA-NETSFDOZER-15338467...
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1069-1)
This phpMyAdmin update addresses several security and non security issues : - This is a phpMyAdmin version upgrade bnc892401: From 4.1.14.3 : - sf4501 security XSS in table browse page CVE-2014-5273 - sf4502 security Self-XSS in enum value editor CVE-2014-5273 - sf4503 security Self-XSSes in...
Simple Forum 1.10-1.11 - SQL Injection
The sf-forum WordPress plugin was affected by a SQL Injection security vulnerability...
Simple Forum 2.0-2.1 - SQL Injection
The sf-forum WordPress plugin was affected by a SQL Injection security vulnerability...
Wordpress Plugin Simple Forum 2.0-2.1 - SQL Injection Vulnerability
No description provided by source. Simple Forum Version 2.0-2.1sf-forum AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : Simple Forum - Version 2.0 Build 207 Simple Forum - Sürüm 2.1 Build 228 Simple Forum - Version 2.1 Build 236 DORK 2 :...
Windows Meterpreter (skape/jt Injection), Reverse TCP Stager (DNS)
Inject the meterpreter server DLL staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...
Windows Command Shell, Reverse TCP Stager (DNS)
Spawn a piped command shell staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...
WordPress Simple Forum Plugin - SQL Injection
Because of this vulnerability in ahah/sf-profile.php, the attackers can execute arbitrary SQL commands via the "u" parameter. Solution Update the plugin...
Windows Upload/Execute, Bind TCP Stager (Windows x86)
Uploads an executable and runs it staged. Listen for a connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...
Reflective DLL Injection, Bind TCP Stager (Windows x86)
Inject a DLL via a reflective loader. Listen for a connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...
Windows Command Shell, Reverse TCP Stager (IPv6)
Spawn a piped command shell staged. Connect back to the attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 289 include Msf::Payload::Stager include...
Reflective DLL Injection, Bind IPv6 TCP Stager (Windows x86)
Inject a DLL via a reflective loader. Listen for an IPv6 connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...
Windows Inject DLL, Reverse TCP Stager (IPv6)
Inject a custom DLL into the exploited process. Connect back to the attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 289 include Msf::Payload::Stager include...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 nick aka Name and 2 shout aka Shout parameters...
CVE-2007-5948
Multiple cross-site scripting XSS vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 nick aka Name and 2 shout aka Shout parameters...
CVE-2007-5948
SF-Shoutbox 1.2.1 through 1.4 contains multiple XSS vulnerabilities in main.php that allow remote attackers to inject arbitrary script or HTML via the nick (Name) and shout (Shout) parameters. Affected component: SF-Shoutbox main.php; vulnerable versions: 1.2.1–1.4. The root cause is improper san...
[Full-disclosure] SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability
----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: SF-Shoutbox 1.2.1 = 1.4 HTML/JS Injection Vulnerability || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME...
sfshoutbox-inject.txt
----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: SF-Shoutbox 1.2.1 = 1.4 HTML/JS Injection Vulnerability || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME...