1349 matches found
Barracuda CSRF (change e-mail address)
Exploit for php platform in category web applications Exploit Title: Barracuda CSRF change e-mail address Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/barracuda/19576/ Category:: webapps Demo : http://demo.boonex.com/administration/ Greetz: Inj3ct0r Exploit DataBas...
Paypal Affiliate Script CSRF
Exploit for php platform in category web applications Exploit Title: Paypal Affiliate Script CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/php-scripts/affiliate-program-software/phpaffiliate-paypal-affiliate-script/ Category:: webapps Demo :...
Eleytt Research ER-03-2012
Eleytt Research www.eleytt.com Overview: ==================== Michal A. Bucko Credit: ==================== Anonymous researcher Michal A. Bucko Vulnerability Table =================== Note: All of the vulnerabilities are reported in Holdem Manager Professional, poker tracking software. 1. Holdem...
Выполнение подзапросов и команд ОС в инъекциях SELECT под MySQL
We would like to open our blog notes on the practical implementation of the SQL-injections. And also we try to focus more attention on the practical aspects of web application security in the future. SQL injections are the most common server-side Web application vulnerabilities and meet almost...
Boc Web SQL Injection
. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...
Book Review : Defense against the Black Arts
Book Review : Defense against the Black Arts How Hackers Do What They Do and How to Protect against It Ben Rothke write a review of a new book on hacking "Defense against the Black Arts: How Hackers Do What They Do and How to Protect against It". Authors are Jesse Varsalone, Matthew Mcfadden,...
Multiple vulnerabilities in ZENphoto
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ZENphoto, which can be exploited to perform arbitrary PHP code execution, sql injection and cross site scripting attacks. 1 Arbitrary PHP Code Execution in ZENphoto: CVE-2012-0993 Input passed via...
FineArtPost Cross Site Scripting
FineArtPost XSS Cross Site Scripting Vulnerability Software : FineArtPost Date : 7/1/2012 Vendor : http://www.fineartpost.com/ Get App. : http://www.fineartpost.com/aboutfap/pricing.php Beta : http://www.fineartpost.com/fap2/beta.php Price : $149.59 Dork : inurl:"/displayimages.php?uid="...
OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection
source: https://www.securityfocus.com/bid/50857/info OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify...
Web App Pentesting - PenTest Magazine
Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...
XSS vulnerability in Joomla 1.6.3
Information -------------------- Name : XSS vulnerability in Joomla 1.6.3. Software : All 1.6.x installs prior to and including 1.6.3 are affected. Vendor Hompeage : http://www.joomla.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur mesut at mavitunasecurity...
w3af v.1.1 - Web Application Attack and Audit Framework Released
w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...
OneOrZero AIMS Security Bypass and SQLi Vulnerabilities
OneOrZero AIMS is prone to a security bypass vulnerability and an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Researcher: Malware, Increasingly Interdependent, Stifles Security Wares
BARCELONA — A researcher says that malicious software such as botnets and browser exploit kits are becoming more and more interdependent, complicating the job of those who seek to detect and remove the malware. Aditya Sood, a doctoral student in the Department of Computer Science and Engineering ...
XSS Vulnerability in Administration Interface of JIRA Bamboo Plugin
We have identified and fixed a cross-site scripting XSS vulnerability in JIRA administration interface. Affected version is JIRA 4.3.x XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a JIRA page. You can read more about XSS attacks at various places on the web...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ApPHP Shopping Cart <= XSRF (Change Admin Password)
Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.Arachni is smart, it trains itself by learning from...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Out There Web Solutions SQL Injection Vulnerability
Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web :...