Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

Code injection

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

UBUNTU-CVE-2012-3742

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

Jessica Rhaye Design Cross Site Scripting

---------------------------------------------------------------- Jessica Rhaye Design = Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Jessica Rhaye Design = Cross Site Scripting VulnerabilitieS Author : Hack Center Security...

PT-2012-4982

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6 Description The issue concerns the Safari browser in Apple iOS, where it fails to properly restrict the use of a specific Unicode character that resembles the https lock indicator. This allows remote attackers to...

CVE-2012-3742: Undefined Security Weakness

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

CVE-2012-1640

Multiple cross-site scripting XSS vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when 1 adding or 2 updating a category...

PT-2012-3404

Name of the Vulnerable Software and Affected Versions Drupal Managesite module versions 6.x-1.x before 6.1-1.1 Description The issue allows remote authenticated users with administer managesite permissions to inject arbitrary web script or HTML via the title parameter when adding or updating a...

CVE-2012-1640: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when 1 adding or 2 updating a category...

CVE-2012-1654

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

PT-2012-3418

Name of the Vulnerable Software and Affected Versions Data module versions prior to 6.x-1.0 Data module versions prior to 7.x-1.0-alpha3 Description The issue allows remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML. This is achieved via...

CVE-2012-1654: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

Bullseye Creative => SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bullseye Creative = SQL injection Vulnerability Author: RaMeZ Libyan Darkness Storm - LDS Google dork : intext:powered by: Bullseye Creative "inurl:.php?id=" Date : 16-9-2012 Greets : LDS members poc: www.site.com/sick...

CVE-2011-5173

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...

PT-2012-2150

Name of the Vulnerable Software and Affected Versions Bugbear Entertainment FlatOut 2005 Description The issue is related to a buffer overflow that can be triggered by a long string in the title field in a bed file, potentially allowing user-assisted remote attackers to cause a denial of service...

CVE-2011-5173: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

SiteGo - Remote File Inclusion

SiteGo - Remote File Inclusion Exploit Title: SiteGo Remote File Inclusion Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link: http://site-go.com/free/site-go.zip Tested on:...

CVE-2012-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...