SnipSnap 0.5.2a / 1.0b1 / 1.0b2 Cross Site Scripting

CVE-2014-9559 SnipSnap XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: SnipSnap /snipsnap-search? query Parameter XSS Product: SnipSnap Vulnerable Versions: 0.5.2a 1.0b1 1.0b2 Tested Version: 0.5.2a 1.0b1 1.0b2 Advisory Publication: Jan 30, 2015 Latest Update: Jan 30, 2015...

SmartCMS 2 Cross Site Scripting

CVE-2014-9557 SmartCMS Multiple XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple XSS Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest...

SmartCMS 2 SQL Injection

CVE-2014-9558 SmartCMS Multiple SQL Injection Security Vulnerabilities Exploit Title: Smartwebsites SmartCMS v.2 Multiple SQL Injection Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication: Jan 22, 2015 Latest Updat...

Alibaba Cross Site Scripting / Open Redirect

Alibaba Taobao, AliExpress, Tmall, Online Electronic Shopping Website XSS & Open Redirect Security Vulnerabilities Domains Basic: Alibaba Taobao, AliExpress, Tmall are the top three online shopping websites belonging to Alibaba. Vulnerability Discover: Wang Jing, Division of Mathematical Sciences...

Blackhat – Upcoming Cyber Thriller Movie

"Hacking" is not just popular among cyber security experts and criminals, but also is a great interest for movies industries as well. Hollywood movies such as 1995 released Hackers and 2001 released Swordfish are examples of it, and now Chris Hemsworth's new flick Blackhat. Blackhat – An upcoming...

India Times Cross Site Scripting

All Links in Two Topics of Indiatimes indiatimes.com Are Vulnerable to XSS cross site scripting Attacks Domain Description: http://www.indiatimes.com "According to the Indian Readership Survey IRS 2012, the Times of India is the most widely read English newspaper in India with a readership of 7.6...

Warning: Malware Campaign targeting Jailbroken Apple iOS Devices

A new piece of malicious malware infection targeting jailbroken Apple iOS devices in an attempt to steal users’ credentials, has been discovered by Reddit users. The Reddit Jailbreak community discovered the malicious infection dubbed as ‘Unflod Baby Panda’, on some jailbroken Apple iOS devices o...

Unix Command Shell, Bind TCP (via Zsh)

Listen for a connection and spawn a command shell via Zsh. Note: Although Zsh is often available, please be aware it isn't usually installed by default. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

Unix Command Shell, Reverse TCP (via Zsh)

Connect back and create a command shell via Zsh. Note: Although Zsh is often available, please be aware it isn't usually installed by default. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

autocorr, broffice.org, openoffice.org security update

CentOS Errata and Security Advisory CESA-2012:0705 Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

RHEL 5 / 6 : openoffice.org (RHSA-2012:0705)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0705 advisory. OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application,...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

lighttpd - Denial of Service (PoC)

29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67" --- CUT --- static const short...

CentOS Update for libtiff CESA-2009:1159 centos3 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2009:1159 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Ubuntu Update for Linux kernel vulnerabilities USN-894-1

Ubuntu Update for Linux kernel vulnerabilities USN-894-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8941.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-894-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu USN-801-1 (tiff)

The remote host is missing an update to tiff announced via advisory USN-801-1. OpenVAS Vulnerability Test $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-801-1 tiff Authors: Thomas Reinke...

RHEL 4 / 5 : libtiff (RHSA-2009:1159)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1159 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Several integer overflow flaws...

[oCERT-2009-008] Dillo integer overflow

2009-008 Dillo integer overflow Description: Dillo, an open source graphical web browser, suffers from an integer overflow which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by HTML pages with embedded PNG images, the...

U-Mail Webmail 4.91 (edit.php) Arbitrary File Write Vulnerability

No description provided by source. U-Mail Webmail Arbitrary File Write Vulnerability ================================================== Vulnerable: U-Mail 4.91 Vendors: www.comingchina.com Category: Input Validation Error Impact: An attacker can write arbitrary data to new files. Author: Shennan...

U-Mail Webmail 'edit.php' Arbitrary File Write Vulnerability

U-Mail Webmail Arbitrary File Write Vulnerability ================================================== Vulnerable: U-Mail 4.91 Vendors: www.comingchina.com Category: Input Validation Error Impact: An attacker can write arbitrary data to new files. Author: Shennan Wang Date: 2008-10-30 Web:...