Unfixed XSS vulnerability at www.etkaticaret.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.etkaticaret.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2007. It is current...

Unfixed XSS vulnerability at www.twsmarket.com

Security researcher BackDoor, has submitted on 15/09/2007 a cross-site-scripting XSS vulnerability affecting www.twsmarket.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

OpenSSH X11 Cookie本地验证绕过漏洞

OpenSSH是一款开放源码的SSH协议的实现。 OpenSSH不正确管理可信和不可信X11 COOKIE，本地攻击者可以利用漏洞绕过验证启动转发的X11会话。 目前没有详细漏洞细节提供。 rPath rPath Linux 1 OpenSSH OpenSSH 4.6 GNOME gnome-ssh-askpass 0 Gentoo Linux 2007.0 升级到最新程序： http://www.openssh.com/txt/release-4.7...

Fixed XSS vulnerability at hope.6419.net

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting hope.6419.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...

Fixed XSS vulnerability at e.www1.xwjp.com

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting e.www1.xwjp.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is current...

Samba nss_info extension privilege escalation

Gid 0 is assigned to user, if "winbind nss info" configuration parameter has value "sfu" or "rfc2307"...

Unfixed XSS vulnerability at www.toko24.com

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting www.toko24.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2007. It is currently...

Unfixed XSS vulnerability at www.all-horse-classifieds.com

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting www.all-horse-classifieds.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It ...

Unfixed XSS vulnerability at www.asp7.net

Security researcher Narcoticxs, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.asp7.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is currently...

Unfixed XSS vulnerability at www.balloonmarket.co.kr

Security researcher kusomiso.com, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.balloonmarket.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/09/2007. It is...

Microsoft Visual FoxPro 6.0 (FPOLE.OCX v. 6.0.8450.0) Remote PoC

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-----------------------------------------------------------------------------------------------------------...

Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)

Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote PoC ----------------------------------------------------------------------------------------------------------- 0-day: Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library FPOLE.OCX v. 6.0.8450.0 Remote Stack Overflow url:...

Microsoft Visual FoxPro 6.0 - FPOLE.OCX 6.0.8450.0 Remote (PoC)

----------------------------------------------------------------------------------------------------------- 0-day: Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library FPOLE.OCX v. 6.0.8450.0 Remote Stack Overflow url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site:...

Unfixed XSS vulnerability at www.aguilasturistica.com

Security researcher OMEHA, has submitted on 09/05/2007 a cross-site-scripting XSS vulnerability affecting www.aguilasturistica.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It is...

Unfixed XSS vulnerability at smartphonemarket.nl

Security researcher OMEHA, has submitted on 09/05/2007 a cross-site-scripting XSS vulnerability affecting smartphonemarket.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It is currently...

Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit

Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...

Unfixed XSS vulnerability at www.netvoyager.ca

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.netvoyager.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is current...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...