Unite Horizontal Carousel

Unite Horizontal Carousel, , Directory Traversal Updated the extension, fixed the bug, the new version is 1.1 UpdateNoticeURL http://unitecms.net/news...

Katello: /etc/katello/secure/passphrase is world readable

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file...

PT-2013-2198

Name of the Vulnerable Software and Affected Versions Rack versions 1.1.x before 1.1.6 Rack versions 1.2.x before 1.2.8 Rack versions 1.3.x before 1.3.10 Rack versions 1.4.x before 1.4.5 Rack versions 1.5.x before 1.5.2 Description The issue allows remote attackers to guess the session cookie, ga...

ICEstate SQL Injection Vulnerability

ICEstate Real Estate Marketplace suffers from a remote SQL injection vulnerability. '/ -.- ------------------------------oOO------OOo----------------------------------- | ICEstate Real Estate Marketplace SQL Injection Vulnerability |...

ICEstate SQL Injection

'/ -.- ------------------------------oOO------OOo----------------------------------- | ICEstate Real Estate Marketplace SQL Injection Vulnerability | -------------------------------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://bastardlabs.info ! Download:...

grinder: /var/lib/pulp/cache/grinder directory is world-writeable

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files...

ReciPHP 1.1 SQL Injection

'/ -.- --------------------oOO------OOo---------------------- | ReciPHP 1.1 SQL Injection Vulnerability | --------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://0xuht.org ! Download: http://sourceforge.net/projects/reciphp/files/ ! Version: 1.1 ! Date:...

Wordpress HD Webplayer 1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications | | | | \ | | | \ /\ | | | | | | | | | | | | / \ | |/ / | ' \ | | | . | | | | / / /\ \ | | / | | | | | | | | || |\ | | | | | \ \ / \ |||,|| || || ||| | || || \// \ - JoinSe7en...

WordPress Plugin HD Webplayer 1.1 - SQL Injection

| | | | \ | | | \ /\ | | | | | | | | | | | | / \ | |/ / | ' \ | | | . | | | | / / /\ \ | | / | | | | | | | | || |\ | | | | | \ \ / \ |||,|| || || ||| | || || \// \ - JoinSe7en +----------------------------------------------------------------------+ | Wordpress HD Webplayer 1.1 SQL Injection...

Wordpress Plugins - Piecemaker Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Piecemaker Arbitrary File Upload Vulnerability Version : 1.1 Link : http://wordpress.org/extend/plugins/the-piecemaker/ Plugins : http://downloads.wordpress.org/plugin/the-piecemaker.1.1.zip Date : 30-06-2012...

e107 Filedownload Plugin - Arbitrary File Upload Remote File Disclosure

e107 Filedownload Plugin - Arbitrary File Upload Remote File Disclosure source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately...

e107 FileDownload 1.1 Shell Upload / File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WordPress PDW File Browser 1.1 Shell Upload

Description : Wordpress Plugins - PDW File Browser Arbitrary File Upload Vulnerability Version : 1.1 Link : http://wordpress.org/extend/plugins/pdw-file-browser/ Plugins : http://downloads.wordpress.org/plugin/pdw-file-browser.zip Date : 30-05-2012 Google Dork :...

Squiggle 1.7 SVG Browser Java Code Execution

Exploit for multiple platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2012-1406

Unspecified vulnerability in the GO Bookmark Widget com.gau.go.launcherex.gowidget.bookmark application 1.1 for Android has unknown impact and attack vectors...

SA-CONTRIB-2012-014 - Drupal Commerce - Cross Site Scripting (XSS)

CVE: CVE-2012-1639 Drupal Commerce is a flexible eCommerce framework built on Drupal 7 that lets you construct any type of eCommerce website. Part of its flexibility lies in its ability to render product fields into node displays through the product reference field used to build dynamic Add to Ca...

cApexWEB ver1.1 SQL Injection

Exploit for php platform in category web applications Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angl...

JVN#04329324: Etomite vulnerable to cross-site scripting

Etomite is a content management system CMS. Etomite contains an issue with the processing of contents in the search field, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

WP VideoWhisper plugin 1. Version 1 0DAY-vulnerability warning-the black bar safety net

EXP: a Date: 2011-09-02 Author: Miroslav Stampar miroslav. stamparatgmail.com @stamparm Software Link: Version: 1.1 tested Note: magicquotes has to be turned off --------------- PoC POST data --------------- s=-1' AND 1=IF21,BENCHMARK5 0 0 0 0 0 0,MD5CHAR115,113,108,109,97,112,0--%2 0 e.g.: curl...

Hastymail2 < 1.1 RC1 Multiple XSS Vulnerabilities

Hastymail2 is prone to multiple cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...