Mini-CWB <= 2.1.1 Remote XSS Vulnerability

========================================================== Mini-CWB = 2.1.1 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 25 May 2008 SITE : www.citec.us APPLICATION : BMForum VERSION : = 2.1.1 Lastest Version VENDOR :...

Unfixed XSS vulnerability at www.togophonebook.com

Security researcher Uber0n, has submitted on 25/05/2008 a cross-site-scripting XSS vulnerability affecting www.togophonebook.com, which at the time of submission ranked 885358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

Unfixed XSS vulnerability at www.cdsworld.com

Security researcher Azat Harutyunyan, has submitted on 25/05/2008 a cross-site-scripting XSS vulnerability affecting www.cdsworld.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

Unfixed XSS vulnerability at www.thegreenhead.com

Security researcher tenest, has submitted on 13/05/2008 a cross-site-scripting XSS vulnerability affecting www.thegreenhead.com, which at the time of submission ranked 59657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...

Unfixed XSS vulnerability at rosemary.umw.edu

Security researcher PaPPy, has submitted on 25/04/2008 a cross-site-scripting XSS vulnerability affecting rosemary.umw.edu, which at the time of submission ranked 57592 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is currently...

CVE-2008-2024

creationtimestamp| type| source ---|---|--- 2008-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5494...

VLC媒体播放器MP及Cinepak解码器缓冲区溢出漏洞

BUGTRAQ ID: 28904,28903 CVECAN ID: CVE-2008-1769,CVE-2008-1768 VLC Media Player是一款免费的媒体播放器。 VLC处理畸形格式的媒体文件时存在漏洞，如果用户受骗使用VLC播放器打开了特制的媒体文件或流媒体的话，就会在MP4和Cinepak解码器模块中触发缓冲区溢出，导致拒绝服务或执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200804-25）以及相应补丁: GLSA-200804-25：VLC:...

VLC媒体播放器字幕文件栈溢出漏洞

BUGTRAQ ID: 28274 CVECAN ID: CVE-2008-1881 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/subtitle.c文件的ParseSSA函数中存在栈溢出漏洞： if sscanf s, "Dialogue: %^,,%d:%d:%d.%d,%d:%d:%d.%d,%81920^\r\n", buffertext2, 如果用户受骗打开了SSA文件中的超长字幕的话，就可能触发这个溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------...

Unfixed XSS vulnerability at directory.oregonstate.edu

Security researcher PaPPy, has submitted on 25/04/2008 a cross-site-scripting XSS vulnerability affecting directory.oregonstate.edu, which at the time of submission ranked 6699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.stampwants.com

Security researcher KrepTOr, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.stampwants.com, which at the time of submission ranked 221099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.krea.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.krea.lt, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.sbasociacija.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.sbasociacija.lt, which at the time of submission ranked 3112848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at www.minus.lt

Security researcher F3nix, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.minus.lt, which at the time of submission ranked 3108015 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...

XOT Detection

The remote target is an XOT router. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid30122; scriptversion "1.14"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish: "XOT Detection"; scriptsetattributeattribute:"synopsis", value: "This plugin detects XOT X.25 over TCP....

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Oracle 10g R1 - xdb.xdbpitrigpkg PLSQL Injection Change Sys Password // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25,...

oracle-dropsql.txt

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Unfixed XSS vulnerability at search.tennessean.com

Security researcher flux, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting search.tennessean.com, which at the time of submission ranked 30464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

GLSA-200711-25 : MySQL: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-25 MySQL: Denial of Service Joe Gallo and Artem Russakovskii reported an error in the convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine that is leading to a failed assertion when handling CONTAINS...