OpenCMS 10.5.3 Cross Site Request Forgery

Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities Injection Google Dork: N/A Date: 02-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://www.opencms.org/en/ Software Link:...

Explained: user agent

If you are the kind of person that uses different browsers or different devices to access websites, you may have noticed that many sites can look quite different depending on which browser you are using. When your browser sends a request to a website, it identifies itself with the user agent stri...

Apple iOS/watchOS/tvOS and OS X El Capitan OpenGL Arbitrary Code Execution Vulnerability

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is an operating system for smart TVs, and...

Apple iOS/watchOS/tvOS and OS X El Capitan libxslt Arbitrary Code Execution Vulnerability

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a smart TV operating system. libxslt is an XSLT...

WordPress WPML Plugin < 3.1.9.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

CMS Made Simple 1.11.9 - Multiple Vulnerabilities

CMS Made Simple 1.11.9 - Multiple Vulnerabilities Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS...

MS12-060: Vulnerability in Windows common controls could allow remote code execution: August 14, 2012

Resolves a vulnerability in Windows common controls that could allow remote code exescution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released security...

ExponentCMS 2.0.5 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

ExponentCMS 2.0.5 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Onur Yılmaz...

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...

Anthem Design SQL Injection

+------------------------------------------------------------------------------------------+ |-------------------- Anthem Design Multiple SQL Injection Vulnerability -------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

Turkish Takedown Thursday - 74 Turkish websites defaced by #Antisec

Turkish Takedown Thursday - 74 Turkish websites defaced by Antisec Once again Antisec strikes. This time the mission was "Turkish Takedown Thursday ". Anonymous hackers deface 74 Turkish websites for the name of Antisec with a message on home page of every website as shown above pic. Hacked 74...

DodeCMS to create a website content management system upload vulnerability 0day-vulnerability warning-the black bar safety net

Program description: DodeCMS to create a website content management system by the Liaoning to create a network Technology Co., Ltd. based on Microsoft ASP, GM ACCESS database development is completed; Access modes using the dynamic mode, basically realized the system custom function, The code...

Maxtrade AIO CMS LFI Vulnerabilty

Exploit for php platform in category web applications ================================= Maxtrade AIO CMS LFI Vulnerabilty ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

Debian Security Advisory DSA 1344-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1344-1. OpenVAS Vulnerability Test $Id: deb13441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1344-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 1346-1] New iceape packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1346-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 4th, 2007 http://www.debian.org/security/faq -...

OpenCms XSS vuln.

OpenCms XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/opencms-xss-vuln.html vendor:http://www.opencms.org/ affected version:6.0.3 and prior Product Description: OpenCms is a professional level Open Source Website Content Management...

walla30.txt

Application: Walla TeleSite Vendors: http://www.walla.co.il Versions: 3.0 and perior Platforms: Windows ISAPI, a few vulnerabilities apply Linux too Bug: Multiple Vulnerabilities Exploitation: Remote with browser Date: 13 Nov 2005 Author: Rafi Nahum, Pokerface e-mail: [email protected] web: N...