Universal Reader 1.16.740.0 Denial Of Service

Title: Universal Reader Filename Denial Of Service Vulnerability Software : Universal Reader Software Version : 1.16.740.0 product version: 0.63.538 Vendor: http://uread.superfection.com/ Vulnerability Published : 2012-05-12 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

WordPress Nmedia Users File Uploader 1.7 File Upload

File upload vulnerability in WordPress Nmedia Users File Uploader plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Kish Guest Posting 1.0 File Upload

File upload vulnerability in WordPress Kish Guest Posting plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

AnvSoft Any Video Conveter 4.3.6 Unicode Buffer Overflow

Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits: Vulnerability Research Laboratory Team...

Creative Works - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Creative Works Multiple sql web scripts Google Dork:Powered by: Creative Works Software Link:www.creativeworks.com.ec Version:2012 Tested on:linux and windows any os credits:Security Warriors Team SWT...

WebCalendar 1.2.4 RCE

Remote command execution vulnerability in WebCalendar install/index.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WordPress 2.8.3 RCE

Remote command execution vulnerability in WordPress Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

lucid design Blind sql Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability

Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org Vendor Status: fixed...

vtiger CRM 5.2.0 LFI

Local file include vulnerability in vtiger CRM include/utils/utils.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)

CVE: CVE-2012-2339 The glossary module scans posts for glossary terms, adding an indicator. By hovering over the indicator, users may learn the definition of that term. The module does not sufficiently sanitize the taxonomy information. This leaves sites vulnerable to Cross-Site Scripting attacks...

SA-CONTRIB-2012-074 - Contact Forms - Access Bypass

CVE: CVE-2012-2340 This module expands the features of the site wide contact form. It eliminates the drop down category menu by generating a clean looking contact form without a drop down menu with a unique path for each of the contact form categories. The module allowed users to edit the Contact...

vtiger CRM 5.0.4 LFI

Local file include vulnerability in vtiger CRM graph.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Wordpress-3-3-1 vulnerability documentation-bug warning-the black bar safety net

Most popular Wordpress recent new release of the 3. 3. 1 vulnerabilities, and now published about vulnerability details...... Quicl’sBlog've been looking at Wordpress vulnerability, and through the network to collect the first time for the majority of the Wordpress user with Wordpress...

S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection

S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6...

CVE-2012-1690

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1703...

Fake Google Iranian domain defaced by Algerian Script Kiddies

Google got Pwned ? NO Few Algerian Script Kiddies try to spread fake rumours that they Hack and Deface the Giant Search engine "Google Iranian" domain . As the above screenshot shown a Algerian flag on it and Page Titles : "H4Ck3D By vaga-hacker dz and DR.KIM". As mentioned by hacker, the team...

Article Dashboard SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Article Dashboard sql injection Date: 3-5-2012 Author: b0y h4ck3r Version: no more than this Category: webapps Google dork: inurl:ezineready.php?id= intext:Powered by Article Dashboard Tested on: windows7 Demo site:...

Google Fixes Five Bugs in Chrome 18

Google has fixed five security vulnerabilities in its Chrome browser, including three high-severity flaws. One of the less-severe vulnerabilities fixed in Chrome 18 is a race condition in the browser’s sandbox. This round of patches in Chrome is one of the rare occasions when the company didn’t...

Winds Online SQL Injection

Exploit Title: Winds online test.asp SQL Injection Vulnerability + Author: Cair3x + Team : Ajax Security Team + D0rk : Powered by FLEX360 Exploit Vulnerability Page : test.asp http://target.com/patch/test.asp?Cid=SQL Demo : http://www.netech.org/test.asp?cid=9' Exploit BY : Cair3x...