Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple CSRF Vulnerabilities

No description provided by source. Exploit Title: Vanilla Forums = 2.0.18.8 & Van2Shout 1.0.51 Multiple CSRF Google Dork: n/a Date: 13/4/13 Exploit Author: Henry Hoggard Vendor Homepage: http://vanillaforums.org/ , http://vanillaforums.org/addon/van2shout-plugin Software Link:...

PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability

No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:read.php?datespan= Vulnerability: 1. SQL Injection 1.1...

Oracle Java SE GSUB ReqFeatureIndex Buffer Overflow - ver 2 (CVE-2013-5907)

A heap buffer overflow vulnerability exists in Oracle Java. The vulnerability is due to invalid processing of the ReqFeatureIndex entry in the GSUB table. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to visit a webpage containing a maliciously crafted Java...

Microsoft Internet Explorer CVE-2013-0811 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities

Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Vanilla Forums where 1337 is the id. Bookmark CSRF: http://site.org/index.php=/vanilla/discussion/bookmark/1337 UnBookmark CSRF http://site.org/index.php=/vanilla/discussion/bookmark/1337?...

Part of the Discuz! The forum user can be any brush points-vulnerability warning-the black bar safety net

For some Discuz! Forum on the promotion visit this place not paying attention so the user can be any brush Forum user points and levels First click on the promotion to access ! You can see this interface “If you have a friend by one of the following links to access the site, you will get reward...

Free Hosting Manager 2.0.2 Cross Site Scripting

Exploit Title: Free hosting manager V2.0.2 Stored XSS Date: 19/12/2012 Exploit Author: Lee Chung Eon Vendor by: Software Link: http://www.fhm-script.com/download.php Version: 2.0.2 Category:Web Security Tested on: Windows xp / 7...

Free hosting manager V2.0.2 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Free hosting manager V2.0.2 Stored XSS Date: 19/12/2012 Exploit Author: Lee Chung Eon Vendor by: Software Link: http://www.fhm-script.com/download.php Version: 2.0.2 Category:Web Security Tested on: Windows xp / 7...

GreenBrowser 6.1.x Cross Site Scripting

GreenBrowser About: dialog XSS and stored XSS Vendor URL:http://www.morequick.com/ advisore:http://lostmon.blogspot.com/2012/03/greenbrowser-about-dialog-xss-and.html Vendor notify:NO exploit available:yes GreenBrowser is your best choice of flexible and powerful green web browser. GreenBrowser i...

Anonymous Deface page - "POPE is not welcome, out out!!!!!"

Anonymous Deface page - "POPE is not welcome, out out!!!!!" Anonymous blocked access to two websites linked to the upcoming visit to Mexico by Pope Benedict XVI. Anonymous Hispano, the hackers succeeded in temporarily knocking the websites offline and defacing them with their own message: "Hacked...

PHP &quot;zend_strndup()&quot;多个空指针引用拒绝服务漏洞

BUGTRAQ ID: 51417 CVE ID: CVE-2011-4153 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在检验zendstrndup调用的返回值的实现上存在多个拒绝服务漏洞，攻击者可利用这些漏洞造成受影响应用崩溃，拒绝服务合法用户。 0 PHP 5.3.8 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net...

F-Secure Multiple Products SEH Overwrite

Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Affected Products : F-Secure Anti-Virus 2011 F-Secure Anti-Virus 2010 F-Secure Internet Security...

CVE-2011-1810

The Cascading Style Sheets CSS implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

The Cascading Style Sheets CSS implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2011-1810

Removed by vendor...

Oracle Java ICC Profile clrt Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the way Java handles color...

Chrome Stable Release

The Google Chrome team is happy to announce the release of Chrome 12 to the Stable Channel for all platforms. Chrome 12.0.742.91 includes a number of new features and updates, including: Hardware accelerated 3D CSS New Safe Browsing protection against downloading malicious files Ability to delete...

Month Of Abysssec Undisclosed Bugs - VWD-CMS 2.1

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Wellcome to My Site! Hello! ... ... ... This page remove Admins Role in VWD-CMS...

linux/x86 send "visit inj3ct0r.com" to all konsole XOR encoded 99 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 send "visit inj3ct0r.com" to all konsole XOR encoded 99 bytes ======================================================================= /...

Online Job Board - Authentication Bypass

Online Job Board - Authentication Bypass '/ -.- --------------------oOO------OOo----------------------------- | Online Job Board Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3...