15699 matches found
3 6 0 Marvel Team virtualization vulnerabilities the fourth bomb: CVE-2 0 1 5-8 5 6 7 vulnerability analysis-vulnerability warning-the black bar safety net
2 0 1 5 years is“the cloud leap”year, is also a virtualization vulnerability really is people cognition, attention of a year, unwilling to“like the wind”3 6 0 Marvel Team take the initiative, with practical actions for cloud computing escort. As of today, we accumulated in kvm, xen, vmware platfo...
rtmpdump: multiple issues
Several issues have been found in the part of rtmpdump handling RTMP streams by LMX of Qihoo 360 Codesafe Team. These issues include memory leak, integer overflow, type confusion when dealing with AMF strings and objects, and several other parsing issues...
HackerOne: Team Member(s) associated with a Group have Read-only permission (Post internal comments) can post comment to all the participants
Hello Hackerone, I find bug with it team Members associated with a Group have only permission Post internal comments can post comment to all the participants Bypass it just with Add comma ',' isinternal=,...
PHP Melody CMS 2.3 SQL Injection
================================================================================ PHP Melody CMS v2.3 SQL injection ================================================================================ Vendor Homepage: https://www.phpsugar.com Date: 26/12/2015 Script Link:...
ATOMYMAXSITE 2.5 SQL Injection
Exploit Title : ATOMYMAXSITE 2.5 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.ibizz.nl/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/24 Version : 2.5 Demo:...
Beezfud - Remote Code Execution
Exploit for php platform in category web applications ================================================================================ Beezfud Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/EVA-01/beezfud...
ATOMYMAXSITE 2.5 Cross Site Scripting
Exploit Title : ATOMYMAXSITE CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://maxtom.sytes.net/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/23 Version = 2.5 Payload : "PersianHack Team Demo:...
Rips Scanner 0.5 Directory Listing
...
Rips Scanner 0.5 Local File Inclusion
================================================================================ Rips Scanner 0.5 - Local File Inclusion ================================================================================ Vendor Homepage: https://github.com/robocoder/rips-scanner Date: 24/12/2015 Software Link:...
Beezfud - Remote Code Execution
Beezfud - Remote Code Execution ================================================================================ Beezfud Remote Code Execution ================================================================================ Vendor Homepage: https://github.com/EVA-01/beezfud Date: 23/12/2015...
Grawlix 1.0.3 Code Execution
Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 11/17/2015 Disclosed to public: 12/21/201...
PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery
Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported t...
Arastta 1.1.5 - SQL Injection
Arastta 1.1.5 - SQL Injection Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclose...
PhpSocial 2.0.0304_20222226 Cross Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...
CouchCMS 1.4.5 Cross Site Scripting / Open Redirect
Security Advisory - Curesec Research Team 1. Introduction Affected Product: CouchCMS 1.4.5 Fixed in: 1.4.7 Fixed Version Link: http://www.couchcms.com/products/ Vendor Website: http://www.couchcms.com/ Vulnerability Type: XSS & Open Redirect Remote Exploitable: Yes Reported to vendor: 11/17/2015...
Arastta 1.1.5 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015 Release mode: Fu...
PHP 7.0.0 - Format String
Exploit for multiple platform in category dos / poc Overview -------------------------------------------- A fun little format string vulnerability exists in PHP 7.0.0 due to how non-existent class names are handled. From my limited research I believe this issue is likely exploitable for full code...
Arastta 1.1.5 - SQL Injection Vulnerability
Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to...
Grawlix 1.0.3 - Cross-Site Request Forgery
Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendo...
PhpSocial 2.0.0304_20222226 - Cross-Site Request Forgery
Security Advisory - Curesec Research Team 1. Introduction Affected Product: PhpSocial v2.0.030420222226 Fixed in: not fixed Fixed Version Link: n/a Vendor Webite: http://phpsocial.net Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015...