WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation

Exploit Title: WordPress User Meta Manager Plugin Privilege Escalation Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/ Software Link:...

pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery

function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "https://192.168.0.103/diagbackup.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5";...

WordPress Users Ultra 1.5.50 Cross Site Scripting

Exploit Title: WordPress Users Ultra Plugin Persistence XSS Discovery Date: 2015/10/20 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...

CVE-2015-8103

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

CVE-2015-8103

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection

Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...

Sagem FAST3304-V2 - Authentication Bypass (2)

Sagem FAST3304-V2 - Authentication Bypass 2 ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Sagem javascrip...

Sagem FAST3304-V2 - Authentication Bypass (2)

================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Sagem javascript injection Date: 27/10/15 Exploit Author:...

PHPMyLicense 3.0.0 3.1.4 - Denial of Service

PHPMyLicense 3.0.0 3.1.4 - Denial of Service Hello, I want to report following exploit: Exploit Title: PHPMyLicense Stored Cross Site Scripting Date: 09-10-2015 Exploit Author: Aria Akhavan Rezayat @ Websec GesmbH Website: https://websec-test.com Vendor Homepage: https://phpmylicense.com Software...

USN-2743-3: Unity Integration for Firefox, Unity Websites Integration and Ubuntu Online Accounts extension update

USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through the signing process. Because these addons currently break search engine installations LP:...

USN-2743-3 unity-firefox-extension, webapps-greasemonkey, webaccounts-browser-extension update

USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through the signing process. Because these addons currently break search engine installations LP:...

jQuery Mobile Docs 1.2.0 final XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: jQuery Mobile Docs 1.2.0 final XSS Reflected Software Link: http://demos.jquerymobile.com/1.2.1/ Exploit Author: Andrei Manole Contact: email protected Tested On : Windows FireFox CVE : N/A Category: webapps Date: 05/09/2015 1...

IP.Board 4.X - Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: IP.Board 4.X Stored XSS Date: 27-08-2015 Software Link: https://www.invisionpower.com/ Exploit Author: snop. Contact: http://twitter.com/rabbitzorg Website: http://rabbitz.org Category: webapps 1. Description A registered or...

Design Infotech CMS - SQL Injection Vulnerability

========================================================== + Title :- Design Infotech CMS - SQL Injection Vulnerability + Date :- 23 - July - 2015 + Vendor Homepage :- http://www.designinfotech.in/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...

Vulnerability in VirtueMart for Joomla

Hello 3APA3A! This is Brute Force vulnerability in VirtueMart for Joomla. Which is at order details page. ------------------------- Affected products: ------------------------- Vulnerable are VirtueMart 3.0.9 for Joomla and previous versions. ---------- Details: ---------- Brute Force WASC-11:...

Joomla com_informations component - SQL Injection vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla cominformations component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version:...

Joomla! Component com_memorix - SQL Injection

Exploit Title: Joomla commemorix component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All Tested on: Kali linux x64 / Windows 8.1 pro x64 1...

Joomla com_memorix component - SQL Injection vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla commemorix component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All...

Joomla! Component com_memorix - SQL Injection

Joomla! Component commemorix - SQL Injection Exploit Title: Joomla commemorix component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All Tested on...

Joomla! Component com_informations - SQL Injection

Joomla! Component cominformations - SQL Injection Exploit Title: Joomla cominformations component SQL Injection vulnerability Date: 13-08-2015 Software Link: N/A Exploit Author: Omar AbuHassan Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960 CVE: N/A Category: webapps Version: All...