PunBB Reputation.php Mod 2.0.4 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Reputation.php Mod newPOST = $Host; my $Cookies = new HTTP::Cookies; my $HTTP = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Referrer = "formsent=1&pid=10174&poster=Dante90, WaRWolFz...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or...

Unfixed XSS vulnerability at antipatch.us

Security researcher H4RDW1R3D, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting antipatch.us, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is currently...

openSUSE Security Update : libpng-devel (libpng-devel-455)

This update of libpng fixes the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0. CVE-2008-5907 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-381)

The Mozilla Firefox browser was updated to version 3.0.5, fixing various security issues and stability problems. The following security issues were fixed : MFSA 2008-69 / CVE-2008-5513: Mozilla security researcher mozbugra4 reported vulnerabilities in the session-restore feature by which content...

openSUSE Security Update : libpng-devel (libpng-devel-455)

This update of libpng fixes the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0. CVE-2008-5907 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Unfixed XSS vulnerability at www.sanal-wahset.org

Security researcher VirtualSystEm, has submitted on 15/07/2009 a cross-site-scripting XSS vulnerability affecting www.sanal-wahset.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is...

Inside Microsoft's July Security Patch Batch

Microsoft released six security bulletins today — three rated Critical and three rated Important. Two of the issues are being actively exploited on the Internet and four of the issues are client-side vulnerabilities, which means the exploit can only occur if a user visits an evil website or opens...

ms08-0 6 7 The English system attack code, metasploit plug-in code released-vulnerability warning-the black bar safety net

Metasploit attack platform released the latest ms08-0 6 7 attack plug-ins. Adds an initial exploit for MS08-0 6 7, support for XP SP2/SP3 DEP, 2 0 0 3 SP0/SP2 no-DEP. The current XP system better, via the DEP data protection, but 2 0 0 3 system after an attack often crash. Code only forMetasploit...

Unfixed XSS vulnerability at pizzaweb.com

Security researcher Sr., has submitted on 28/06/2009 a cross-site-scripting XSS vulnerability affecting pizzaweb.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed. ...

CVE-2008-6833: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

Unfixed XSS vulnerability at www.invisible-consulting.com

Security researcher pimpim, has submitted on 16/06/2009 a cross-site-scripting XSS vulnerability affecting www.invisible-consulting.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Unfixed XSS vulnerability at www.bandpingredients.com

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.bandpingredients.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. It is...

Unfixed XSS vulnerability at 24-images-seconde.com

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting 24-images-seconde.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. It is...

Unfixed XSS vulnerability at www.leprevert-nozay.com

Security researcher Mystick, has submitted on 06/05/2009 a cross-site-scripting XSS vulnerability affecting www.leprevert-nozay.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is...

Webradev Download Protect 1.0 - Remote File Inclusion

Webradev Download Protect 1.0 - Remote File Inclusion Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

Fixed XSS vulnerability at e-bank.kredyty-online.eu

Security researcher Viper.aT, has submitted on 13/05/2009 a cross-site-scripting XSS vulnerability affecting e-bank.kredyty-online.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Ruby DL::dlopen could open a library with tainted library name even if $SAFE > 0

DL::dlopen could open a library with tainted library name even if $SAFE 0...

Unfixed XSS vulnerability at bestfindinga.com

Security researcher Blast, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting bestfindinga.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed XSS vulnerability at www.spaceheads.co.uk

Security researcher MKA392, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting www.spaceheads.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currentl...