orion.extfeedbackform Bitrix Module 2.1.2 CSRF / SQL Injection

Advisory ID: HTB23280 Product: orion.extfeedbackform Bitrix module Vendor: www.orion-soft.ru Vulnerable Versions: 2.1.2 and probably prior Tested Version: 2.1.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015 Vendor Patch: December 11, 2015...

redcoon.de XSS vulnerability

Vulnerable URL: http://www.redcoon.de/c50000002-Computer-Soft-Hardware?x...

soft-ware.net XSS vulnerability

Vulnerable URL: http://www.soft-ware.net/service/suche.asp?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 135300 Google Pagerank| 0 VIP website status:| No Check soft-ware.net...

IconLover 5.42 - Local Buffer Overflow

Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP professional sp2 ''' Credits & Authors:...

IconLover 5.42 - Local Buffer Overflow

IconLover 5.42 - Local Buffer Overflow Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP...

IconLover 5.42 - Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP professional sp2 '''...

Wolf CMS - Arbitrary File Upload Execution

Wolf CMS - Arbitrary File Upload Execution Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command Execution Reported Date : 05-May-2015 Fixed Date : 10-August-2015 Exploit Author : Narendra Bhati CVE ID : CVE-2015-6567 , CVE-2015-6568 Contact: Facebook :...

Dogma India dogmaindia CMS Authentication Bypass

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

SQL Injection Vulnerability in Hode-soft System

Nanjing Hidi METEX Software Co., Ltd. is an outstanding enterprise with application software and quality service, jointly invested by Hidi Investment Corporation and Canada METEX Corporation, a new joint-stock private enterprise focusing on high-quality, humanized application software development...

FTP Commander 8.02 - Overwrite (SEH)

FTP Commander 8.02 - Overwrite SEH Exploit Title: FTP Commander 'Costum Command' SEH Over-WriteBuffer Overflow. Date: 8/17/2015 Exploit Author: UnN0n Software Vendor : http://www.internet-soft.com/ Software Link: http://www.internet-soft.com/ftpcomm.htm Version: 8.02 Tested on: Windows 7 x3232 BI...

FTP Commander 8.02 - Overwrite (SEH)

Exploit Title: FTP Commander 'Costum Command' SEH Over-WriteBuffer Overflow. Date: 8/17/2015 Exploit Author: UnN0n Software Vendor : http://www.internet-soft.com/ Software Link: http://www.internet-soft.com/ftpcomm.htm Version: 8.02 Tested on: Windows 7 x3232 BIT Steps to Produce the Crash: 1- op...

WordPress Avenir-Soft Direct Download 1.0 XSS / CSRF Vulnerability

WordPress Avenir-Soft Direct Download plugin version 1.0 suffers from cross site request forgery and cross site scripting vulnerabilities. Exploit Title: Wordpress Avenir-Soft Direct Download Plug-in XSS/CSRF Exploit Author: Ashiyane Digital Security Team Vendor Homepage:...

Wordpress Avenir-Soft Direct Download Plug-in XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress Avenir-Soft Direct Download Plug-in XSS/CSRF Exploit Author: Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/avenirsoft-directdownload/ Date: 2015-08-06 Tested On: Kali Linux - FireFox...

WordPress Avenir-soft Direct Download Plugin <= 1.0 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

Avenir-soft Direct Download <= 1.0 - Cross-Site Scripting (XSS) & CSRF

The Avenir-soft Direct Download WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...

WordPress Avenir-Soft Direct Download 1.0 XSS / CSRF

Exploit Title: Wordpress Avenir-Soft Direct Download Plug-in XSS/CSRF Exploit Author: Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/avenirsoft-directdownload/ Date: 2015-08-06 Tested On: Kali Linux - FireFox Software Link:...

soft-directory.net XSS vulnerability

Open Bug Bounty ID: OBB-62391 Description| Value ---|--- Affected Website:| soft-directory.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

BELL-CVE-2015-2331 CVE-2015-2331 does not affect BellSoft software

Bulletin has no description...

HD Soft Windows FTP Server Username Format String attack Code Execution - Ver2 (CVE-2004-0069)

A code execution vulnerability has been reported in Hd Soft Windows FTP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20150305)

A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this flaw to escalate their privileges on the system. CVE-2015-0274, Important It was found that...