WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress...

WordPress Plugin Polls Widget 1.0.7 - SQL Injection

Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress plugin which provide fancy user Polling layout to website...

members.unioncountycoc.com Open Redirect vulnerability

Vulnerable URL: http://members.unioncountycoc.com/directory/OpenMemPage.jsp?memid=357=https://www.xssposed.org/=391 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:33 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

directory.unionsnsw.org.au XSS vulnerability

Vulnerable URL: http://directory.unionsnsw.org.au/search/?psearchad=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3Ead.x=0ad.y=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:43 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

Race condition

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

CVE-2015-7312

CVE-2015-7312 affects the Linux kernel 3.x/4.x via race conditions in the aufs aufs3-mmap.patch and aufs4-mmap.patch patches. The vulnerability allows local users to cause denial of service (use-after-free/BUG) or potentially gain privileges through madvise or msync calls, related to mm/madvise.c...

CVE-2015-7312

Multiple race conditions in the Advanced Union Filesystem aufs aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service use-after-free and BUG or possibly gain privileges via a 1 madvise or 2 msync system call, related to...

Threat Outbreak Alert RuleID19353: Email Messages Distributing Malicious Software on November 12, 2015

Medium Alert ID: 42063 First Published: 2015 November 13 15:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19353 may contain the following files: Name |...

通达OA Office Anywhere 2015版网络智能办公系统一处盲注漏洞/demo测试（需登录）

简要描述： 最新版，绕过过滤，直接注 详细说明： 厂商：通达信科 测试demo地址：.../ 从官网（http://.../）直接点击集团版在线试用 进去以后，注入出在：listreport.php文件中 注入地址：.../general/datacenter/modeldesign/design/report/listreport.php?repid=1&openmode=design&menuid=1 参数repid可注入 直接在repid参数后加入一个a，直接把SQL爆出来了 错误，请联系管理员 SQL语句: select from crsreport where id in 1a...

Threat Outbreak Alert RuleID18992: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41749 First Published: 2015 October 27 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18992 may contain the following files: Name |...

用友某系统从弱口令到sql注射到getshell

简要描述： 弱口令、sql注射、getshell 详细说明： 系统地址： http://vip.ufida.com.cn/Frame/Index.aspx 弱口令帐号：adminnc 密码：adminnc 在自助查询处，发现注入（需要登录，注意cookie有时效） GET http://vip.ufida.com.cn/RepositorySearchInfo/DoctInfo.aspx?ReposID=38d4a08e-8b79-4de7-8566-30aecfb1d56f HTTP/1.1 Accept: text/html, application/xhtml+xml, /...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2778-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2778-1 advisory. It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route...

USN-2779-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route advertisement with an invalid MTU that a user space daemon like NetworkManager would honor and apply to the kernel, causing a denial of service...

EC Ruling Invalidates Safe Harbor - Now What?

In a ruling on October 7, 2015 the European Court of Justice ECJ invalidated the principal European component of the U.S.-E.U. Safe Harbor Framework when it ruled in Schrems v. Data Protection Commissioner. In the ruling the court said that the existing U.S.-EU Safe Harbor agreement, overseen by...

Threat Outbreak Alert RuleID18363: Email Messages Distributing Malicious Software on September 30, 2015

Medium Alert ID: 41282 First Published: 2015 September 30 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18363 may contain the following files: Name ...

members.unioncountycoc.com XSS vulnerability

Vulnerable URL: http://members.unioncountycoc.com/directory/jsp/busdir/SearchResults.jsp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Hacking Team Says It Always Sold 'Strictly Within the Law'

Hacking Team officials are disputing reports that the company sold its surveillance and intrusion software to oppressive regimes in countries that were under sanction. The company said it sold its products “strictly within the law and regulation as it applied at the time any sale was made.” The n...

Wordpress CP Multi View Event Calendar Plugin 1.1.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN...