SA-CONTRIB-2012-149 - Hostip - Cross Site Scripting (XSS)

Hostip enables you to query the http://www.hostip.info/ API to get the country / state information based on the user's IP address or a specific IP passed to it. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in unspecified services in IBM Rational Team Concert RTC 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items...

CVE-2012-0748

CVE-2012-0748 : The affected software is IBM Rational Team Concert (RTC) 4.x prior to 4.0.0.1. The vulnerability involves multiple cross-site request forgery (CSRF) flaws in unspecified services that allow remote attackers to hijack the authentication of arbitrary users and perform requests that ...

CVE-2012-0748

Multiple cross-site request forgery CSRF vulnerabilities in unspecified services in IBM Rational Team Concert RTC 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items...

APlite Technologies Local File Inclusion

---------------------------------------------------------------- APlite Technologies = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : APlite Technologies = Local File Inclusion Vulnerability Author : Hack Center Security Team...

MediaRocket Local File Inclusion

---------------------------------------------------------------- MediaRocket = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : MediaRocket = Local File Inclusion Vulnerability Author : Hack Center Security Team Discovered By :...

Deadcow Design Local File Inclusion

---------------------------------------------------------------- Deadcow Design = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : Deadcow Design = Local File Inclusion Vulnerability Author : Hack Center Security Team Discovered B...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2012:1304 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

SA-CONTRIB-2012-148 - OG - Access Bypass

OG Organic groups enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. A group membership can be given immediately upon subscribing, or be pending - waiting for a group administrat...

New Twitter-Based Malware Uses Direct Messaging to Spread

Sophos is warning of a new trick to get Twitter users to open direct messages from trusted users that ultimately infect their machines with malware. In a blog post, senior technology consultant Graham Clulely said the initial message is a tweet claiming the recipient’s been captured on a Facebook...

CMS united SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

RedHat Update for spice-gtk RHSA-2012:1284-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Wordpress Plugin Sociable - XSS Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

WEBBISH SQL Injection

---------------------------------------------------------------- WEBBISH SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : WEBBISH SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Quotationally SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Brother Bear SQL Injection

---------------------------------------------------------------- Brother Bear SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Brother Bear SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software...

2xl Cross Site Scripting / SQL Injection

---------------------------------------------------------------- 2xl XSS/SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : 2xl XSS/SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Gazine2 Cross Site Scripting

---------------------------------------------------------------- Gozine2 alert/0/ www.gozineyejavan.ir/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ www.gozine2.co/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ GreetZ To : | Am!r | B3HZ4D |...

Tariq Rauf SQL Injection

---------------------------------------------------------------- Tariq Rauf SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Tariq Rauf SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link...