Unfixed XSS vulnerability at www.endustrimuhendisim.com

Security researcher CiCoSz, has submitted on 27/08/2007 a cross-site-scripting XSS vulnerability affecting www.endustrimuhendisim.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/08/2007. It is...

BitchX 1.1 Final - MODE Remote Heap Overflow

BitchX 1.1 Final - MODE Remote Heap Overflow !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT...

Command injection

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

EDraw Office Viewer Component 5.1 - HttpDownloadFile Insecure Method -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url:...

Unfixed XSS vulnerability at ttongfly.net

Security researcher kusomiso.com, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting ttongfly.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is currently...

Cisco IOS Next Hop Resolution Protocol (NHRP) - Denial of Service

Cisco IOS Next Hop Resolution Protocol NHRP - Denial of Service // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel free to modify this code as you like, as long as you include the / / above copyright statement. / / / / Please use this code only to check your OWN cisco routers. / / / /...

Unfixed XSS vulnerability at www.sorlandetutvandrersenter.no

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.sorlandetutvandrersenter.no, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It...

Unfixed XSS vulnerability at allstarfg.com

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting allstarfg.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently unfixe...

Unfixed XSS vulnerability at xitearth.kicks-ass.org

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting xitearth.kicks-ass.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Fixed XSS vulnerability at www.johnandjessica.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.johnandjessica.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at www.ebzb.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.ebzb.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Unfixed XSS vulnerability at ronsloan.net

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting ronsloan.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Unfixed XSS vulnerability at secure.xynergy.org

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting secure.xynergy.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

Remote Command Exec (FireFox 2.0.0.5 et al)

By: Nate McFeters nate dot mcfeters -at- gmail Billy BK Rios billy dot rios -at- gmail Tested in FireFox 2.0.0.5 and 3.0a6, Netscape Navigator 9, and Mozilla browser. NOTE These examples were created for WinXP SP2 with no external mail programs installed outlook, notes…etc. If you have an externa...

Microsoft Internet Explorer 0-day vulnerability

Unfiltered shell characters on executed URL: protocol application handler...

TISA2007-06-Public.txt

========================================================================= TeamIntell Security Advisory TISA2007-06-Public ------------------------------------------------------------------------- Element CMS "s" parameter script insertion vulnerability...

Unfixed XSS vulnerability at www.karonline.net

Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.karonline.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currently...