Klinzmann A-A-S XSRF / Code Execution

Syhunt: A-A-S Application Access Server Multiple Security Vulnerabilities Advisory-ID: 200905111 Discovery Date: 3.23.2009 Release Date: 5.11.2009 Affected Applications: A-A-S 2.0.48 and possibly older versions Class: XSRF Cross Site Request Forgery Arbitrary Command Execution, Undocumented Defau...

[DSECRG-09-020] Apache Geronimo - XSRF vulnerabilities

Original Advisory: http://dsecrg.com/pages/vul/show.php?id=120 Digital Security Research Group DSecRG Advisory DSECRG-09-020 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSRF Vulnerabilities Exploits: YES...

Apache Geronimo Cross Site Request Forgery

Original Advisory: http://dsecrg.com/pages/vul/show.php?id=120 Digital Security Research Group DSecRG Advisory DSECRG-09-020 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSRF Vulnerabilities Exploits: YES...

IBM BladeCenter Advanced Management XSS/XSRF

Louhi Networks Information Security Research Security Advisory Advisory: IBM BladeCenter Advanced Management Module Multiple vulnerabilities XSS type 2 & 1, CSRF, Information Disclosure Release Date: 2009-04-09 Last Modified: 2009-04-09 Authors: Henri Lindberg [email protected], CISA Device...

net2ftp 0.97 XSS / XSRF

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804 Advisory URL:...

Easy Chat Server Change Admin Password

EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba /BO...

PHPBB 2.0.22 XSRF Exploit

Author: Dante90, WaRWolFz Crew Title: Exploit PhpBB = 2.0.22 Add User In A Group SWF Version By Dante90 0-Day Proof Of Concept: PhpBB 2.0.22 = CSRF Add user In Group By Vincy Change: ByPass HTTPREFERER Protection. MSN: [email protected] Web: www.warwolfz.org Exploit PhpBB = 2.0.22 Add User ...

EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)

EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...

EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability

No description provided by source. HTML !-- EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Version: 2.2 Date: Jan 11, 2007 Size:1519KB Download Easy Chat Server http://www.echatserver.com/ecssetup.exe By Mountassif Moad -- HEAD TITLEEFS Easy Chat Server XSRF Change Admin Pass...

EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)

EFS Easy Chat Server 2.2 - Cross-Site Request Forgery Change Admin Password EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...

EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability

Exploit for unknown platform in category remote exploits =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability...

Online Game Script XSRF

|Site Online Game: http://gladiatus.net | | Author: S1B3RK4N | | Email: s1b3rk4natgmaildotcom | | Exploit Code : document.forms0.submit NOT=Arkadaslar bu exploit ile hedef kisinin oyundaki mail adresini degistirebilirsiniz..."form action kismindaki server alanını duzenlemeyi unutmayın..." NOTE=Hi...

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

No description provided by source. D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. html form action="http://10.1.1.166/Forms/cbiSetSWUpdate?16640,0,0,0,0,0,0,0,0"...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action="http://10.1.1.165/callwzd.html" method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its...

ManageEngine Firewall Analyzer 5 XSRF/XSS Vulnerability

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the...

Zoom VoIP Phone Adapter XSRF Exploit

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5...

D-Link VoIP Phone Adapter XSRF / XSS

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

ManageEngine Firewall Analyzer 5 XSRF / XSS

Written By Michael Brooks Special thanks to str0ke! Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS Vulerable version: Build Version : 5.0.0 Build Number : 5000 Build Date : Apr25 homepage: http://fwanalyzer.com/ This is live exploit code against the online demo. Go ahead, run it! With...

Pligg 9.9.5 Cross Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...