Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability

Document Title: =============== Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1444 Release Date: ============= 2015-03-10 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2015-4002

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.3.2 before 1.3.2.27 389 Directory Server versions 1.3.3 before 1.3.3.9 Description The issue allows remote attackers to obtain sensitive information from the changelog via unspecified vectors due to improper...

用友某子站SQL注入

简要描述： 子站存在几处post注入点及反射xss 详细说明： http://service.yonyou.com/AppWeb/XinWen/XinWen.aspx?Page=2&xinwenlxbh=&XinWenMC=1 http://service.yonyou.com/AppWeb/XinWen/XinWen.aspx?xinwenlxbh=XWLX20080328001 http://service.yonyou.com/AppWeb/XinWen/XinWen.aspx?xinwenlxbh=XWLX20071204001&XinWenMC=1...

NASA.gov Cross Site Scripting

Exploit Title: NASA.gov sub-domains Multiple vulnerabilities Date: 27/01/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: Multiple vulnerabilities Google dork: Tested on: NASA.gov sub-domains NASA description :...

CVE-2014-10008

Multiple cross-site request forgery CSRF vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add 1 an administrator via a crafted request to the admin page, 2 an agent via a crafted request to the agent page, 3 a sub-agent via a...

PT-2015-3652

Name of the Vulnerable Software and Affected Versions Stark CRM version 1.0 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through crafted requests to specific pages, including the admin page, agent page, sub...

From one upload to Maxthon within the network-vulnerability warning-the black bar safety net

From one upload to Maxthon within the network The first is to find a sub-domain name of the upload custom. maxthon. cn In the upload icon when only verifies the content-type is not on file after the judgment ! 1532ed2be1f9d7260dd9085f527ba9e0. png Simple modification packages to get to the shell ...

VUPlayer-2.49-(.M3U)-DEP-Bypass

VUPlayer 2.49 .M3U ExploitUniversal buffer overflow/DEP bypass Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 DEP:OptOut import struct p = open"ExploitVirtualProtect.m3u", "w" crash = "\x41" 1012 sc = "\x89\xe1\xd9\xee\xd9\x71\xf4\x58\x50\x59\x49\x49\x49\x49"...

CVE-2014-8379

Multiple cross-site scripting XSS vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles to the 1 Webform or 2 User sub-modules...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles to the 1 Webform or 2 User sub-modules...

CVE-2014-8379

Multiple cross-site scripting XSS vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles to the 1 Webform or 2 User sub-modules...

PT-2014-8502

Name of the Vulnerable Software and Affected Versions Marketo MA module versions prior to 7.x-1.5 for Drupal Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles in the 1 Webform or 2 User...

PT-2014-8499

Name of the Vulnerable Software and Affected Versions Drupal Site Banner module versions prior to 7.x-4.1 Description A cross-site scripting XSS issue exists in the context administration sub-panel of the Site Banner module, allowing remote authenticated users with the "Administer contexts" Conte...

Mozilla.org Cross Site Scripting

Domains: http://lxr.mozilla.org/ http://mxr.mozilla.org/ The two domains above are almost the same Websites information: lxr.mozilla.org, mxr.mozilla.org are cross references designed to display the Mozilla source code. The sources displayed are those that are currently checked in to the mainline...

Bash Shellshock vulnerability simply explained-vulnerability warning-the black bar safety net

Preface The national day before the analysis of this vulnerability,see the security reference for readers to discuss,made a simple Bash Shellshock vulnerability description. Vulnerability overview Vulnerability the principle of popular point that is to bash the language in the definition of a...

Domain Analyzer Security Tool - Finds all the security information for a given domain name

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Features It creates a directory with all the information, including nmap output files. It uses colors to remark...

Buddy Zone <= 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR:...

DMXReady Faqs Manager <= 1.1 - Remote Contents Change Vulnerability

No description provided by source. Title : DMXReady Faqs Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 24.97 $ Dork : inurl:incfaqsmanager.asp DorkEx :...

Click&Email (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch...

Sub Station Alpha 4.08 - (.rt) Local Buffer Overflow PoC

No description provided by source. /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include string.h include stdio.h define FIL3 testfile.rt char header= \x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x3...