Unfixed XSS vulnerability at workn4u.cdr.mlxchange.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting workn4u.cdr.mlxchange.com, which at the time of submission ranked 3242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at www.hotpropertyhamilton.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.hotpropertyhamilton.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Solaris 2.5.1 (sparc) : 112582-01

The remote host is missing Sun Security Patch number 112582-01 110862-05 Sun Management Center Patch for the snmpv1 security vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is...

AllMyLinks 0.5.0 - 'index.php' Remote File Inclusion

/\ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM Contact: [email protected] ===================================================== ThanX = All My Friends &...

Unfixed XSS vulnerability at www.cansesli.com

Security researcher Babaconda, has submitted on 01/07/2007 a cross-site-scripting XSS vulnerability affecting www.cansesli.com, which at the time of submission ranked 2191944 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is...

OmniWeb 5.5.1 Javascript alert() Remote Format String PoC

Exploit for macOS platform in category dos / poc ========================================================= OmniWeb 5.5.1 Javascript alert Remote Format String PoC ========================================================= MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length...

Unfixed Redirect vulnerability at zirve100.com

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a Redirect vulnerability affecting zirve100.com, which at the time of submission ranked 37453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently unfixed. If...

MOAB-04-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 + "%x.%n.%n.%n.%n.%n\r\n" + "\r\n" + "In Gruber We Trust\r\n" +...

Apple Mac OSX 10.4.8 - DiskManagement BOM cron Local Privilege Escalation

Apple Mac OSX 10.4.8 - DiskManagement BOM cron Local Privilege Escalation !/usr/bin/ruby c 2006 LMH code from the other exploit, porting Kevin Finisterre crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one. And works like a charm. require...

Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the...

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

iLife iPhoto Photocast - XML Title Remote Format String PoC !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 +...

MOAB-03-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can be modified but it's not recommended. Adjust as...

Unfixed XSS vulnerability at www.j-shopping.jp

Security researcher s0m.ph, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.j-shopping.jp, which at the time of submission ranked 322500 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

Unfixed XSS vulnerability at www.comicsavenue.com

Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.comicsavenue.com, which at the time of submission ranked 2037206 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It i...

Unfixed XSS vulnerability at www.kbb.com.tr

Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.kbb.com.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is currently...

Apple QuickTime 7.1.3 - 'HREFTrack' Cross-Zone Scripting

!/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can be modified but it's not recommended. Adjust as...

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting !/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can ...

Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit

Exploit for macOS platform in category remote exploits ================================================================= Apple Quicktime Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for...

RBlog 1.0 - 'admin.mdb' Remote Password Disclosure

Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== FreeStyle Wiki Affected Software: fswiki 3.6.2 = F0under: bd0rk = Greetings: TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat 0day.today 2018-01-09...