CVE-2013-0536

ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J2...

IBM Notes 8.x < 8.5.3 IF4 HF2 / 9.x < 9.0 IF2 Code Execution

The remote host has a version of Lotus Notes 8.x earlier than 8.5.3 Fix Pack 4 Interim Fix 2 or 9.0 earlier than Interim Fix 2. As such, it is potentially affected by a code execution vulnerability. A flaw in the Multi-user Profile Cleanup Service enables an attacker to execute arbitrary code upo...

ClipShare 4.1.1 - Multiples Vulnerabilities

ClipShare 4.1.1 - Multiples Vulnerabilities Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Last...

ClipShare 4.1.1 - Multiples Vulnerabilities

Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Last Checked: 27 March 2013 Note : to exploit th...

Ultra Light Forum Cross Site Scripting

Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed...

Wordpress plugin extended-user-profile Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MyBB MyYoutube Cross Site Scripting

Exploit Title: MyYoutube MyBB Stored XSS Date: 17.12.2012 Exploit Author: limb0 Vendor Homepage: http://www.mybb-es.com/ Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Category:Web Security Tested on: Linux +-----------------------------------------------------+ Stored-XSS...

MyBB User Profile Skype ID Plugin 1.0 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Test...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0...

MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

MyYoutube MyBB Plugin 1.0 - SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

XSS vulnerability in atlassian-bonfire-plugin pagination

There is an XSS vulnerability present in the pagination of Bonfire sessions. Steps to reproduce: 1. Create a user with username '" onmouseover="alert4321" blah="' without the single quotes 2. Create at least 21 test sessions owned by this user 3. Visit the user's profile page and click on the tes...

XWiki 4.2-milestone-2 Cross Site Scripting

Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki. Date: 26/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.xwiki.org Software Link: http://enterprise.xwiki.org/xwiki/bin/view/Main/Download Version: 4.2-milestone-2 Gr33Tz: @aviadgolan , @benhayak,...

XWiki 4.2-milestone-2 Multiple Stored XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki. Date: 26/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.xwiki.org Software Link: http://enterprise.xwiki.org/xwiki/bin/view/Main/Download Version:...

XWiki 4.2-milestone-2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

XWiki 4.2-milestone-2 - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki. Date: 26/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.xwiki.org Software Link:...

XWiki 4.2-milestone-2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki. Date: 26/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.xwiki.org Software Link: http://enterprise.xwiki.org/xwiki/bin/view/Main/Download Version: 4.2-milestone-2 Gr33Tz: @aviadgolan , @benhayak,...