Unfixed XSS vulnerability at shop.sealwise.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting shop.sealwise.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is currently...

Unfixed XSS vulnerability at www.inrtanets.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.inrtanets.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at morenumbers.net

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting morenumbers.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at provetheloyalty.net

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting provetheloyalty.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at universaltonight.net

Security researcher MaXWeL, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting universaltonight.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currentl...

Unfixed XSS vulnerability at www.tiefel-landtechnik.de

Security researcher MaXWeL, has submitted on 15/03/2007 a cross-site-scripting XSS vulnerability affecting www.tiefel-landtechnik.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/03/2007. It is...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

Unfixed XSS vulnerability at ezhik.org.ru

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ezhik.org.ru, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at eniact.nl

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting eniact.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

CVE-2006-7151

Untrusted search path vulnerability in the libtool-ltdl library libltdl.so 1.5.22-2.3 in Fedora Core 5 might allow local users to execute arbitrary code via a malicious library in the 1 hwcap, 2 0, and 3 nosegneg subdirectories...

Unfixed XSS vulnerability at jqk.com

Security researcher CoNqUeRoR, has submitted on 03/07/2007 a cross-site-scripting XSS vulnerability affecting jqk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is currently unfixed...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...

/bin/ls with gid=0 in Debian linux-ftpd

Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...

Linux ftpd ls privilege escalation

ls command is executed with effective gid 0...

Unfixed XSS vulnerability at www.gue-ngl.org

Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.gue-ngl.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It is currently...

revenge_proftpd_ctrls_24.pl.txt

!/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition -...

MiniWebsvr <= 0.0.6 Remote Resource Consumption DoS Exploit

No description provided by source. import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...

MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service

MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...

Fixed XSS vulnerability at superstoreonebay.com

Security researcher Fugitif, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting superstoreonebay.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is current...