418 matches found
CVE-2012-3518
The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...
Out-of-bounds
The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...
CVE-2012-3518
The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...
Facebook Open to Comments on Proposed Privacy Policy Changes
Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...
Woohooo! After #SopaBlackout, Congress Postpones Action on #SOPA, #PIPA
Woohooo! After SopaBlackout, Congress Postpones Action on SOPA, PIPA A big hurrah to you!!!!! We've won for now SOPA and PIPA were dropped by Congress today. The votes we've been scrambling to mobilize against have been cancelled. When the entire Internet gets angry, Congress takes notice. Both t...
SA-CONTRIB-2012-005 - Vote up/down - Cross Site Scripting
CVE: CVE-2012-1627 This module enables you to add voting widgets to nodes, terms and comments. The vudterm sub-module doesn't sufficiently sanitize taxonomy terms before display. In order to execute arbitrary script injection malicious users must have the ability to create or edit taxonomy terms...
CVE-2011-4552
Multiple cross-site scripting XSS vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of 1 a new vote or 2 the eject member proposal feature...
Code injection
One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service login disruption or spoof votes or comments by selecting a conflicting e-mail address...
CVE-2011-4555
CVE-2011-4555 affects One Click Orgs prior to version 1.2.3. The issue is that user accounts do not require unique e-mail addresses, enabling remote authenticated users to cause login disruption (denial of service) or to spoof votes/comments by selecting a conflicting e-mail address. Root cause: ...
Z-Vote 1.1 Wordpress Plugin SQL Injection Vulnerability
Exploit for php platform in category web applications Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1 Vendor...
WordPress Plugin Z-Vote 1.1 - SQL Injection
WordPress Plugin Z-Vote 1.1 - SQL Injection Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours...
WordPress Plugin Z-Vote 1.1 - SQL Injection
Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1...
WordPress Z-Vote Plugin 1.1 - SQL Injection
WordPress Z-Vote plugin is prone to an SQL injection. This vulnerability exists due to failure in the "/zvote.php" script to properly clean up user-supplied input in "zvote" variable. It allows an attacker to modify data, alter queries to the application SQL database, compromise the access and...
HTB22839: SQL Injection in Z-Vote wordpress plugin
Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injecti...
Z-Vote 1.1 SQL Injection
Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injecti...
SQL Injection Vulnerability in Z-Vote
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Z-Vote WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Z-Vote The vulnerability exists due to input sanitation errors in the "zvote" parameter in zvote.php. A...
TS Special Edition 7.0 - Multiple Vulnerabilities
TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...
TS Special Edition <= v.7.0 Multiple Vulnerabilities
Exploit for php platform in category web applications ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities ==================================================== TS Special Edition = v.7.0 Multiple Vulnerabilities Dork: "Powered by TS Special...