jetlib.sec » Tags » comment

Feeds

133354 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "comment"

Related tags: rating [+], vulnerability [+], wordpress [+], day [+], wikkawiki [+], vulnerabilities [+], vanilla version [+], vanilla [+], useragent header [+], spam [+], path [+], page [+], logging feature [+], least three different ways [+], disclosure [+], cross site scripting [+], cross [+], webapps [+], news [+], tiny bit [+], time hack [+], system updates [+], system [+], skeletonz [+], reputation [+], prime source [+], name [+], hackaday [+], bit [+]

• May 18, 2012
• 18:41

  Vanilla Latest Comment 1.1 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Vanilla version 2.0.18.4 with Latest Comment plugin version 1.1 suffers from a cross site scripting vulnerability.

  Tags:  vanilla cross comment vanilla-version vulnerability  

• 18:41

  Vanilla Latest Comment 1.1 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Vanilla version 2.0.18.4 with Latest Comment plugin version 1.1 suffers from a cross site scripting vulnerability.

  Tags:  vanilla cross comment vanilla-version vulnerability  

• 18:41

  Vanilla Latest Comment 1.1 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Vanilla version 2.0.18.4 with Latest Comment plugin version 1.1 suffers from a cross site scripting vulnerability.

  Tags:  vanilla cross comment vanilla-version vulnerability  

• May 11, 2012
• 14:58

  WikkaWiki 1.3.2 Spam Logging PHP Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.

  Tags:  wikkawiki spam comment page least-three-different-ways useragent-header logging-feature  

• 14:58

  WikkaWiki 1.3.2 Spam Logging PHP Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.

  Tags:  wikkawiki spam comment page least-three-different-ways useragent-header logging-feature  

• 14:58

  WikkaWiki 1.3.2 Spam Logging PHP Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.

  Tags:  wikkawiki spam comment page least-three-different-ways useragent-header logging-feature  

• January 03, 2012
• 14:00

  [webapps / 0day] - Wordpress Comment Rating plugin Multiple Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Wordpress Comment Rating plugin Multiple Vulnerabilities

  Tags:  day wordpress comment vulnerabilities  

• 6:10

  WordPress Comment Rating Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Exploits
  The WordPress Comment Rating plugin suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  comment wordpress rating cross-site-scripting  

• 6:10

  WordPress Comment Rating Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Recent Files
  The WordPress Comment Rating plugin suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  comment wordpress rating cross-site-scripting  

• 6:10

  WordPress Comment Rating Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  The WordPress Comment Rating plugin suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  comment wordpress rating cross-site-scripting  

• July 29, 2011
• 14:15

  Comment system updates

   » ‎ Hack a Day
  We’ve been working hard on this one and finally made a tiny bit of progress. You will find that comments are now nested.  We can see there are some slight visual issues, but we’re working on it. Please be patient with us. Another edition you will find is the “report” button. If you find comments [...]

  Tags:  comment system bit system-updates tiny-bit news  

• July 27, 2011
• 13:01

  Hackaday Comment Policy; We’re cleaning up.

   » ‎ Hack a Day
  Sit down for a moment commenters, we need to talk. Yes, you all knew this post was coming one day. We’ve talked about this topic at length internally, and we have decided that we’re going to clean up our act. For some time, Hack a Day has been growing a reputation as the prime source [...]

  Tags:  day comment hackaday time-hack prime-source reputation news  

• February 23, 2011
• 14:00

  [webapps / 0day] - Comment Rating 2.9.23 Wordpress Plugin Multiple Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Comment Rating 2.9.23 Wordpress Plugin Multiple Vulnerabilities

  Tags:  comment day webapps vulnerabilities  

• 14:00

  [webapps / 0day] - Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

  Tags:  comment day webapps vulnerabilities  

• February 22, 2011
• 15:14

  Comment Rating 2.9.23 Path Disclosure / SQL Injection

   » ‎ Packet Storm Security Exploits
  Comment Rating version 2.9.23 suffers from path disclosure and remote SQL injection vulnerabilities.

  Tags:  path comment rating disclosure  

• 15:14

  Comment Rating 2.9.23 Path Disclosure / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Comment Rating version 2.9.23 suffers from path disclosure and remote SQL injection vulnerabilities.

  Tags:  path comment rating disclosure  

• 15:14

  Comment Rating 2.9.23 Path Disclosure / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Comment Rating version 2.9.23 suffers from path disclosure and remote SQL injection vulnerabilities.

  Tags:  path comment rating disclosure  

• February 16, 2011
• 0:00

  Vuln: Skeletonz Name and Comment Fields HTML Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Skeletonz Name and Comment Fields HTML Injection Vulnerabilities

  Tags:  skeletonz comment name  

• May 17, 2010
• 0:00

  Vuln: MS Comment Joomla! Component 'controller' Parameter Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MS Comment Joomla! Component 'controller' Parameter Local File Include Vulnerability

  Tags:  comment vulnerability  

• May 15, 2010
• 0:00

  Vuln: MS Comment Joomla! Component 'controller' Parameter Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MS Comment Joomla! Component 'controller' Parameter Local File Include Vulnerability

  Tags:  comment vulnerability