402 matches found
CVE-2014-7313
The CVE concerns The One You Fitness Android app (package com.app_oneyou.layout) version 1.399, which does not verify X.509 certificates from SSL servers. Root cause: TLS certificate validation is not performed, enabling man-in-the-middle attackers to impersonate servers and potentially obtain se...
CVE-2014-7457
The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Thank You Counter Button <= 1.8.2 - Cross-Site Scripting (XSS)
The Thank You Counter Button WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Joomla! You!Hostit! 1.0.1 Template Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
PTC Site's RCE/XSS Vulnerability
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:intext:Warning: passthru inurl:view=help...
eYou v4 /grad/admin/admin_maincontent.php 登录绕过漏洞
No description provided by source...
CVE-2014-2315
Multiple cross-site scripting XSS vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 thankscaption, 2 thankscaptionstyle, or 3 thanksstyle parameter to wp-admin/options.php...
CVE-2014-2315
The CVE-2014-2315 entry concerns the WordPress plugin “Thank You Counter Button” (version 1.8.7) and is impacted by multiple stored XSS flaws. The vulnerability affects the parameters (thanks_caption, thanks_caption_style, thanks_style) passed to wp-admin/options.php, enabling remote attackers to...
WordPress Thanks You Counter Button 1.8.7 Cross Site Scripting
============================================================== Title ...| Thanks You Counter Button XSS Version .| thanks-you-counter-button 1.8.7 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://www.wordpress.org/plugins/...
Facebook vulnerability allows to view hidden Facebook Friend List
Facebook is one of the most powerful and reliable social networking website. It allows users to interact with other users after being friends with one another. Facebook allows users to make the friend list public or private. If it is made private, your friend list won't appear on your publicly...
Facebook Friends Disclosure
Facebook Vulnerability Discloses Friends Lists Defined as Private ================================================= Researchers from the Quotium Seeker Research Center identified a security flaw in Facebook privacy controls. The vulnerability allows attackers to see the friends list of any user o...
Your Own Classifieds Cross Site Scripting
Vendor: http://www.yourownclassifieds.com Description: Your own classified software is a script that helps you creates your own store. Discovered by: Rafay Baloch Vulnerability: Non persistent XSS The script fails to sanitize the input that is entered into the text box resulting into a XSS. POC:...
Fedora Update for drupal6-context FEDORA-2013-0246
Check for the Version of drupal6-context OpenVAS Vulnerability Test Fedora Update for drupal6-context FEDORA-2013-0246 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
WordPress Zingiri Web Shop 2.5.0 Shell Upload
|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...
Alliance Issues Guidance for Cloud-Based SIEM Services
The non-profit Cloud Security Alliance today released guidelines for the nascent Security as a Service SecaaS specialization within the broader realm of cloud computing. The goal, the group says, is to help companies and consumers gain a better handle on how best to evaluate, build and deploy...
PHP Volunteer Management System 1.0.2 - Multiple SQL Injections
PHP Volunteer Management System 1.0.2 - Multiple SQL Injections Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities:...
SuSE9 Security Update : unace (YOU Patch Number 10239)
This update fixes several buffer overflows while extracting, testing, or listing an archive file CVE-2005-0160 as well as a buffer overflow while handling long command-line options. CVE-2005-0161 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...
TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow
!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...
Neudimenxion CMS SQL Injection
========================================================= Exploit Title : Neudimenxion CMS SQL Injection Date : 17 July 2011 Author : Netrondoank aka netron Platform/Tested on: Linux myweb : http://www.ilmuhacker.org Version : none Software Link: : http://www.neudimenxion.com/ dork : "CMS ©...