Critical: Red Hat Security Advisory: Ruby on Rails security update

Updated rubygem-actionpack, rubygem-activesupport, ruby193-rubygem-actionpack, and ruby193-rubygem-activesupport packages that fix multiple security issues are now available for Red Hat OpenShift Enterprise 1.0. The Red Hat Security Response Team has rated this update as having critical security...

Nissi Infotech / Pej Studio / Plante Graffix Cross Site Scripting

Exploit Title : nissiinfotech Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.nissiinfotech.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Created ...

Keshav Infotech - SQL Injection / Cross-Site Scripting Vulnerabilities

Customised PHP Applications Development | Wordpress application development | iphone applications | offer PHP Programmer and PHP Developer at a affordable cost | Web Design india | Wordpress dedicated Wordpress experts for your Wordpress Development – KeshavInfotech | PHP Web Designers India |...

Adobe Dreamweaver Installed

Adobe Dreamweaver, a web development application, is installed on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid62684; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/06/24"; scriptxrefname:"IAVT", value:"0001-T-0517";...

Advance Phishing Attacks using HTML5 Fullscreen API

Do your ever use YouTube Instant Search engine a really fast way to search YouTube ? That was developed by a 21 years old developer name - Feross Aboukhadijeh in 2012. Chad Hurley, CEO and co-founder of YouTube, was so impressed that he immediately offered him a job at YouTube. He a web developer...

Plante Graffix SQL Injection

---------------------------------------------------------------- Plante Graffix SQL Injection ---------------------------------------------------------------- Exploit Title: Plante Graffix SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Site : http://net-w0lf.blogspot.com...

[SECURITY] Fedora 16 Update: php-5.3.15-1.fc16

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Duvys Media web design and development file upload

Exploit for php platform in category web applications Exploit Title: duvys media web design and development file upload Date: 01.08.2012 Author: DzErRoR Category:: webapps.. Google dork: intext:Website by Duvys Media: Tested on: win7 Demo sites: http://omnirehab.com/...

WaveMaker Studio Requires No Authentication

The version of WaveMaker Studio detected on the remote host does not require authentication. A remote, unauthenticated attacker could exploit this to create, modify, and deploy projects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Debian Security Advisory DSA 2466-1 (rails)

The remote host is missing an update to rails announced via advisory DSA 2466-1. OpenVAS Vulnerability Test $Id: deb24661.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2466-1 rails Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

PHP CGI Query String Parameters Command Execution

Added: 05/15/2012 CVE: CVE-2012-1823 BID: 53388 OSVDB: 81633 Background PHP is a widely used general-purpose scripting language that is especially suited for Web development. Problem When configured as a CGI script aka php-cgi, PHP does not properly handle query string parameters which are passed...

DSA-2466-1 rails - cross site scripting

Bulletin has no description...

Heycats CMS Cross Site Scripting

Exploit Title : heycats Cms Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://www.heycats.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu -...

Teen's Arrest Underscores Need for More Secure Web Development

A 15-year-old who claimed he was bored when he turned to hacking was arrested for breaking into almost 260 companies during the first three months of this year, according to a ZDNet article published earlier today. Austria’s Federal Criminal Police Office said the teenager, who used the hacker...

stoneware webnetwork6 - Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud security Stoneware...

Keshav Infotech SQL Injection

| Keshavinfotech WebApps Multiple Vulnerability | Author : g3mbeLYCL Feat Nuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 12 December 2011. Tested On : Back|Track 5. ! Google Dork : inurl:"Your Think" Software Information Homepage: http://www.keshavinfotech.com/ PHP...

[SECURITY] Fedora 16 Update: php-5.3.8-3.fc16

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

1stdesign SQL Injection

+------------------------------------------------------------------------------------------+ |------------------------- 1stdesign SQL Injection Vulnerability ------------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

Web development by Discover Web Solutions SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Web development by Discover Web Solutions.. SQL injection Vulnerability + Date : 08 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Web development by Discover Web...

Pixel Army Solutions BLIND SQL-i Vulnerability

Exploit for php platform in category web applications ========================================================================= Pixel Army Solutions BLIND SQL-i Vulnerability ==========================================================================...