myBusinessAdmin SQL Injection

Exploit Title : myBusinessAdmin imagepopup.php SQL Injection Vulnerability Author : DevilScreaM Date : 22/08/2013 Category : Web Applications Vendor : http://mybusinessadmin.com/ Product Link : http://www.redcow.ca/products/mybusinessadmin/ Dork intext:Powered by myBusinessAdmin & Red Cow...

Cross site scripting

Cross-site scripting XSS vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings...

CVE-2013-4229

Cross-site scripting XSS vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings...

PT-2013-4911

Name of the Vulnerable Software and Affected Versions Monster Menus module versions 7.x-1.x before 7.x-1.12 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a...

CVE-2013-4229: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings...

CVE-2013-5315

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

PT-2013-5475

Name of the Vulnerable Software and Affected Versions Scald module versions 6.x-1.x before 6.x-1.0-beta3 Scald module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the Resource Manager of the MEE submodule in the Scald module for Drupal, allowing remote...

CVE-2013-5315: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

VoltEdit CMS SQL Injection / Shell Upload

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

CVE-2013-4600

Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...

PT-2013-5088

Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions prior to 8.5.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the title parameter to "system/workplace/views/admin/admin-main.jsp" or the requestedResourc...

CVE-2013-4600: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...

StarUML WinGraphviz.dll - ActiveX Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 Abou...

Rite CMS 1.0.0 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RiteCMS multiple vulnerabilities Date: 2013 30 July Exploit Author: Yashar shahinzadeh Credit goes for: ha.cker.ir Vendor Homepage: http://ritecms.com/ Tested on: Linux & Windows, PHP 5.2.9 Affected Version : 1.0.0 Contacts: http://Twitter.com/YShahinzadeh , http://y-shahinzadeh.ir...

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation

Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation Exploit Title: Agnitum Outpost security suite privilege escalation - 0Day Date: 2013-08-02 Exploit Author: Ahmad Moghimi http://mallocat.com , https://twitter.com/mall0cat Vendor Homepage: http://www.agnitum.com/ Software Link:...

DEBIAN-CVE-2013-4997

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in 1 an anchor identifier to setup/index.php or 2 a chartTitle aka chart title value...

CVE-2013-4997

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in 1 an anchor identifier to setup/index.php or 2 a chartTitle aka chart title value...

phpVibe 3.1 Disclosure / Remote File Inclusion

Exploit Title: phpVibe 3.1 Multiple Vulnerability Date: 2013-05-07 Author: indoushka Software Link: http://phprevolution.com/ Category: webapps/php Version: 3.1 Price: 40€ Google dork: "Powered by phpVibe v3.1" installation Application error message :...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

imacs CMS 0.3.0 Shell Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : imacs CMS Unrestricted File Upload Exploit Date...