393 matches found
visitstratford.ca XSS vulnerability
Open Bug Bounty ID: OBB-76817 Description| Value ---|--- Affected Website:| visitstratford.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-7539
The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7539
CVE-2014-7539 affects the Android app “com.zizizzi” v1.0 (Zhang Zhijun Taiwan Visit). The issue is lack of X.509 certificate verification for SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive data. The root cause is improper TLS validation in the app; no remediation o...
CVE-2014-7539
The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability
No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:read.php?datespan= Vulnerability: 1. SQL Injection 1.1...
Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple CSRF Vulnerabilities
No description provided by source. Exploit Title: Vanilla Forums = 2.0.18.8 & Van2Shout 1.0.51 Multiple CSRF Google Dork: n/a Date: 13/4/13 Exploit Author: Henry Hoggard Vendor Homepage: http://vanillaforums.org/ , http://vanillaforums.org/addon/van2shout-plugin Software Link:...
JC URLshrink 1.3.1 - Remote Code Execution Vulnerability
No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ +Iranian Are The Best In World+ + + /I N F O\ + | | +...
Oracle Java SE GSUB ReqFeatureIndex Buffer Overflow - ver 2 (CVE-2013-5907)
A heap buffer overflow vulnerability exists in Oracle Java. The vulnerability is due to invalid processing of the ReqFeatureIndex entry in the GSUB table. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to visit a webpage containing a maliciously crafted Java...
Microsoft Internet Explorer CVE-2013-0811 Use-After-Free Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities
Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Vanilla Forums where 1337 is the id. Bookmark CSRF: http://site.org/index.php=/vanilla/discussion/bookmark/1337 UnBookmark CSRF http://site.org/index.php=/vanilla/discussion/bookmark/1337?...
Part of the Discuz! The forum user can be any brush points-vulnerability warning-the black bar safety net
For some Discuz! Forum on the promotion visit this place not paying attention so the user can be any brush Forum user points and levels First click on the promotion to access ! You can see this interface “If you have a friend by one of the following links to access the site, you will get reward...
Free hosting manager V2.0.2 Stored XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Free hosting manager V2.0.2 Stored XSS Date: 19/12/2012 Exploit Author: Lee Chung Eon Vendor by: Software Link: http://www.fhm-script.com/download.php Version: 2.0.2 Category:Web Security Tested on: Windows xp / 7...
Free Hosting Manager 2.0.2 Cross Site Scripting
Exploit Title: Free hosting manager V2.0.2 Stored XSS Date: 19/12/2012 Exploit Author: Lee Chung Eon Vendor by: Software Link: http://www.fhm-script.com/download.php Version: 2.0.2 Category:Web Security Tested on: Windows xp / 7...
GreenBrowser 6.1.x Cross Site Scripting
GreenBrowser About: dialog XSS and stored XSS Vendor URL:http://www.morequick.com/ advisore:http://lostmon.blogspot.com/2012/03/greenbrowser-about-dialog-xss-and.html Vendor notify:NO exploit available:yes GreenBrowser is your best choice of flexible and powerful green web browser. GreenBrowser i...
Anonymous Deface page - "POPE is not welcome, out out!!!!!"
Anonymous Deface page - "POPE is not welcome, out out!!!!!" Anonymous blocked access to two websites linked to the upcoming visit to Mexico by Pope Benedict XVI. Anonymous Hispano, the hackers succeeded in temporarily knocking the websites offline and defacing them with their own message: "Hacked...
PHP "zend_strndup()"多个空指针引用拒绝服务漏洞
BUGTRAQ ID: 51417 CVE ID: CVE-2011-4153 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在检验zendstrndup调用的返回值的实现上存在多个拒绝服务漏洞，攻击者可利用这些漏洞造成受影响应用崩溃，拒绝服务合法用户。 0 PHP 5.3.8 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net...
F-Secure Multiple Products SEH Overwrite
Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Affected Products : F-Secure Anti-Virus 2011 F-Secure Anti-Virus 2010 F-Secure Internet Security...
CVE-2011-1810
The Cascading Style Sheets CSS implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors...
Information disclosure
The Cascading Style Sheets CSS implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors...
