Subscribe via feed.
Posts under XSS

[webapps] – MTP Image Gallery 1.0 (edit_photos.php, title param) – XSS Vulnerability

Posted by deepcore under exploit, m$, Security, XSS (No Respond)

MTP Image Gallery 1.0 (edit_photos.php, title param) – XSS Vulnerability

Tags: , , ,

[webapps] – glFusion 1.2.2 – Multiple XSS Vulnerabilities

Posted by deepcore under exploit, m$, XSS (No Respond)

glFusion 1.2.2 – Multiple XSS Vulnerabilities

Tags: , , ,

[webapps] – glFusion 1.2.2 – Multiple XSS Vulnerabilities

Posted by deepcore under exploit, m$, XSS (No Respond)

glFusion 1.2.2 – Multiple XSS Vulnerabilities

Tags: , ,

Apple Security Advisory 2013-02-19-1

Apple Security Advisory 2013-02-19-1 – Multiple vulnerabilities existed in Java 1.6.0_37, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues were addressed by updating to Java version 1.6.0_41.

Tags: , , , ,

[webapps] – Ultra Light Forum Persistant XSS Vulnerability

Posted by deepcore under exploit, m$, Security, XSS (No Respond)

Ultra Light Forum Persistant XSS Vulnerability

Tags: , ,

Transferable Remote 1.1 XSS / LFI / Command Injection

Transferable Remote version 1.1 for iPad and iPhone suffers from cross site scripting, remote command injection, and local file inclusion vulnerabilities.

Tags: , , ,

Transferable Remote 1.1 XSS / LFI / Command Injection

Transferable Remote version 1.1 for iPad and iPhone suffers from cross site scripting, remote command injection, and local file inclusion vulnerabilities.

Tags: , , ,

strongSwan IPsec Implementation 5.0.2

strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems.

Tags: , , ,

[webapps] – IP.Gallery 4.2.x and 5.0.x Persistent XSS Vulnerability

Posted by deepcore under exploit, XSS (No Respond)

IP.Gallery 4.2.x and 5.0.x Persistent XSS Vulnerability

Tags: , ,

Air Disk Wireless 1.9 LFI / Command Injection

Air Disk Wireless version 1.9 for iPad and iPhone suffers from local file inclusion and command injection vulnerabilities.

Tags: , , , ,