15751 matches found
SA-CONTRIB-2012-165 - Chaos tool suite (ctools) - Cross Site Scripting (XSS)
The Chaos tool suite is primarily a set of APIs and tools to improve the developer experience. The page manager node view task does not sufficiently escape node titles when setting the page title, allowing XSS. This vulnerability is partially mitigate by the node task being disabled by default an...
SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF)
This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently verify POST requests thereby exposing a Cross Site Request Forgery vulnerability. This vulnerability is...
Skype Account Service - Expire Token Bypass Vulnerability
Document Title: =============== Skype Account Service - Expire Token Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=762 Download: http://www.vulnerability-lab.com/resources/videos/762.wmv View: http://www.youtube.com/watch?v=lrNj785QQlg Advisory:...
P3 Technologie SQL Injection Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Baar3 Database Disclosure Exploit
Exploit for php platform in category web applications !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...
Moderate: Red Hat Security Advisory: gegl security update
Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
MobileCartly 1.0 File Upload
File upload vulnerability in MobileCartly savepage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Smadav Anti Virus 9.1 - Crash (PoC)
Smadav Anti Virus 9.1 - Crash PoC Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1...
Smadav Anti Virus 9.1 - Crash (PoC)
Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1 Lastest Version, should be affected...
WebPagetest 2.6 File Upload
File upload vulnerability in WebPagetest resultimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Smadav AntiVirus 9.1 Denial Of Service
Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1 Lastest Version, should be affected...
Smadav AntiVirus - Crash PoC
Exploit for windows platform in category dos / poc Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana email protected / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download...
WordPress Contus Vblog 1.0 File Upload
File upload vulnerability in WordPress Contus Vblog plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress Related Posts Exit Popup SQL Injection
In the name of GOD Exploit Title: Wordpress relatedpostsexitpopup SQL Injection Vulnerability Google Dork: inurl:"/relatedpostsexitpopupwindow.php" OR intitle:"Thanks for visiting our site" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 Location:...
English Defence League defaced by ZCompany Hacking Crew
ZCompany Hacking Crew members hack and deface English Defence League official website https://englishdefenceleague.org,a far-right British organization . Deface page include text "Fuck Zionist Jews! – Boycot israel! – Fuck the American Government! - Fuck fascist Organizations like EDL" and a...
WordPress Eco-Annu SQL Injection
Exploit Title: Wordpress Eco-annu Plugin SQL Injection Vulnerability Google Dork: inurl:"/eco-annu/map.php?eid=" Exploit Author: Ashiyane Digital Security Team Tested on: Windows 7 Location: http://site.com/wp-content/plugins/eco-annu/map.php?eid=SQL Demo :...
WordPress Calendar-Script Blind SQL Injection
Exploit Title: Wordpress Calendar-Script Plugin Blind SQL Injection Vulnerability Google Dork: inurl:"/Calendar-Script/load.php?cid=1" or "intext:Copyright phpcalendarscripts.com ©" Exploit Author: Ashiyane Digital Security Team Vendor Homepage: http://phpcalendarscripts.com/ Tested on: Windows 7...
webERP 4.08.4 SQL Injection
SQL Injection vulnerability in webERP WO parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress Kakao Theme SQL Injection
Exploit Title : Wordpress theme kakao Sql Injection Author : Iranian DataCoders Security Team Discovered By : sil3nt Home : www.datacoders.org/ Security Risk : High - SQL Injection Dork : inurl:themes/wilderness/gallery.php Expl0iTs : Target/wp-content/themes/kakao/sonHaberler.php?ID=sql D3m0 :...