Lame Duck Senate to Vote on NSA Reforming USA FREEDOM Act

The United States Senate will move to vote on the USA FREEDOM Act before the current congressional session closes at the end of the year, a move that pleases digital rights groups. In its current form, the bill would ban the bulk collection of Americans’ private records while granting the...

ShopBuilder 5.6.1 /module/vote/admin/vote_list.php SQL注入漏洞

No description provided by source...

ShopBuilder 5.6.1 /module/vote/admin/vote.php SQL注入漏洞

No description provided by source...

Z-Vote 1.1 - SQL Injection

The z-vote WordPress plugin was affected by a SQL Injection security vulnerability...

Z-Vote 1.1 Wordpress Plugin SQL Injection Vulnerability

No description provided by source. Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours...

TS Special Edition <= 7.0 - Multiple Vulnerabilities

No description provided by source. TS Special Edition = v.7.0 Multiple Vulnerabilities Dork: Powered by TS Special Edition Site: http://templateshares.net Download: http://templateshares.net/special/purchase Reported on 02/05/2010 Author: IHTeam See any seed/leech files of any users 1 Open any...

Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link: http://wealthynetizen.com/wordpress-plugin-comment-rating/ Version...

Comdev Vote Caster 3.1 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Systeme de vote pour site Web 1.0 Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25335/info 'Systeme de vote pour site Web' is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromis...

PHPCMS 9.5.3 /phpcms/modules/vote/classes/vote_tag.class.php SQL注入漏洞

No description provided by source...

CMSTOP vote.php文件SQL注入漏洞

CMSTOP是一款网站内容管理系统。 CMSTOP /apps/vote/controller/vote.php文件存在SQL注入漏洞，攻击者可以利用漏洞活动数据库敏感信息。 0 cmstop 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cmstop.com/...

Appropriations Amendment Threatens to Cut Funding for NSA Collection Program

A small group of Congressmen is trying to cut off the funding for the NSA’s widespread collection of phone and Internet records under the “business records” collection provision of the Foreign Intelligence Surveillance Act. The provision in FISA that enables law enforcement agencies to get access...

vBulletin 5b SQL Injection

!/usr/bin/perl Satuday, March 30, 2013 . . | || || | || \ / | / \ / | |/ \ / \ | || || |\ // // | \ / /\ /||/|| / |||| // / http://www.zempirians.com 00100011 01101100 01100101 01100111 01101001 01101111 01101110 Proof of Concept, SQL Injection vBulletin™ is the world leader in forum and...

vBulletin 5 Beta index.php/ajax/api/reputation/vote/ SQL注入漏洞

No description provided by source...

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...

Wordpress vote-it-up plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Poc http://site.com/wp-content/plugins/vote-it-up/voteitup.php Dork inurl:/plugins/vote-it-up/ Demo : http://www.science-humour.fr/wp-content/plugins/vote-it-up/voteitup.php http://miks.memokraat.ee/wp-content/plugins/vote-it-up/voteitup.php...

CVE-2012-1627

Cross-site scripting XSS vulnerability in vudterm.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms...

Cross site scripting

Cross-site scripting XSS vulnerability in vudterm.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms...

CVE-2012-1627

Vulnerability: CVE-2012-1627 affects the Drupal Vote Up/Down module (vud_term) 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1. Description: the vud_term sub-module does not sufficiently sanitize taxonomy terms, allowing remote authenticated users to inject arbitrary script/HTML. Impact: XSS vi...

CVE-2012-3518

The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...