8156 matches found
Net Neutrality Wins — FCC votes to Protect the Internet
The Federal Communications Commission FCC on Thursday approved its strongest Net Neutrality Plan ever, setting new rules to keep broadband Internet in the United States "Fair, Fast and Open." Net Neutrality is simply the Internet Freedom — Free and Open Internet. It is the principle that Internet...
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
Cross site scripting
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
PT-2015-5593
Name of the Vulnerable Software and Affected Versions Panopoly Magic module versions prior to 7.x-1.17 Description The issue is related to a cross-site scripting XSS vulnerability in the live preview of the Panopoly Magic module for Drupal. This vulnerability allows remote authenticated users to...
CVE-2015-2086: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
MooPlayer 1.3.0 - 'm3u' Buffer Overflow (SEH) (PoC)
!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version:...
K7 Computing 14.2.0.240 Privilege Escalation
/ Exploit Title - K7 Computing Multiple Products Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.k7computing.co.uk/ Tested Version - 14.2.0.240 Driver Version - 12.8.0.104 - K7Sentry.sys Tested on OS - 32bit Windo...
BullGuard Multiple Products Arbitrary Write Privilege Escalation Exploit
Exploit for windows platform in category local exploits / Exploit Title - BullGuard Multiple Products Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.bullguard.com/ Tested Version - 14.1.285.4 Driver Version -...
Sefrengo CMS 1.6.1 - Multiple SQL Injection Vulnerabilities
Sefrengo CMS version 1.6.1 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 01/26/2015 Exploit Author: Nguyen Hung Tuan email protected & ITAS Team www.itas.vn Vendor Homepage:...
ManageEngine Desktop Central 9 Build 90087 - Cross-Site Request Forgery
:8020/STATEID/1417736606982/roleMgmt.do?actionToCall=addUser&SUBREQUEST=XMLHTTP" method="POST" input type="hidden" name="newADAuthUserEmail...
PT-2015-4029
Name of the Vulnerable Software and Affected Versions QPR Portal versions 2014.1.1 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the note-creation page. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...
CVE-2014-8266: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body field...
Trend Micro 8.0.1133 (Multiple Products) - Local Privilege Escalation
/ Exploit Title - Trend Micro Multiple Products Arbitrary Write Privilege Escalation Date - 31st January 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.trendmicro.co.uk/ Tested Version - 8.0.1133 Driver Version - 2.0.0.1009 - tmeext.sys Tested on OS - 32bit Windows XP...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter in a search request, 2 username in a login request, which is not properly handled when logging the event, or 3 page titl...
PT-2015-5248
Name of the Vulnerable Software and Affected Versions ferretCMS version 1.0.4-alpha Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The affected parameter...
HackerOne: Add text to the title of the page "Thanks"
Hi! We can add text to the title of the page "Thanks" Example: https://hackerone.com/mailru/thanks/2014%20Example%201111111111111111111111111...
Sites Powered By INVEM SQL Injection
+++++++++++++++++++++++++++++++++ + +Exploit Title : Invem CMS SQL INJECTION Vulnerability + +Exploit Author : Ashiyane Digital Security Team + +Vendor Homepage: http://www.invem.com/ + +Google Dork : intext:Powered by INVEM. + +Date : 20 / Jan / 2015 + +Tested On : windows se7en + linux Kali +...
PT-2015-5045
Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters and endpoints, including the...