Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability

No description provided by source. Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset //...

Joomla! 1.5.x - 'Token' Remote Admin Change Password

Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...

Unfixed XSS vulnerability at www.ag-partsnet.com

Security researcher B, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.ag-partsnet.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at hmoverflow.com

Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting hmoverflow.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.fraktsidan.se

Security researcher Stacker, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.fraktsidan.se, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currently...

Unfixed XSS vulnerability at www.artvintube.com

Security researcher Mor-DunyA, has submitted on 20/07/2008 a cross-site-scripting XSS vulnerability affecting www.artvintube.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/08/2008. It is current...

Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)

No description provided by source. / k-rad3.c - linux 2.6.11 and below CPL 0 kernel local exploit v3 Discovered and original exploit coded Jan 2005 by sd [email protected] Modified 2005/9 by alert7 [email protected] XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 test...

Unfixed XSS vulnerability at www.yaxinhk.com

Security researcher PD, has submitted on 07/04/2008 a cross-site-scripting XSS vulnerability affecting www.yaxinhk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed...

Unfixed XSS vulnerability at 28hs.com

Security researcher PD, has submitted on 07/04/2008 a cross-site-scripting XSS vulnerability affecting 28hs.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed. If yo...

Unfixed XSS vulnerability at www.2800929.com

Security researcher PD, has submitted on 07/04/2008 a cross-site-scripting XSS vulnerability affecting www.2800929.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is currently unfixed...

BusyBox (uname) Local Format String Exploit

No description provided by source. / lul-busybox.c copyright C 2008 lul-disclosure inc. All rights reserved. this code is distributed with the LPL license agreement http://lul-disclosure.net/LPL.txt moar commonly known as the EULA Epic User License Agreement busybox uname format string exploit by...

Unfixed XSS vulnerability at www.diabetruw.de

Security researcher kInGoFcHaOs, has submitted on 23/06/2008 a cross-site-scripting XSS vulnerability affecting www.diabetruw.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is current...

Unfixed XSS vulnerability at afyonkarahisarim.net

Security researcher Milisx, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting afyonkarahisarim.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currentl...

Unfixed XSS vulnerability at www.violenthammer.tk

Security researcher xylitol, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.violenthammer.tk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

Fedora 7 : roundcubemail-0.2-0.alpha.fc7.1 (2008-5315)

XSS fixes. Requires manual intervention for DB upgrades, see UPGRADING for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Unfixed XSS vulnerability at www.kirschblossom.com

Security researcher BackDoor, has submitted on 13/06/2008 a cross-site-scripting XSS vulnerability affecting www.kirschblossom.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is...

Unfixed XSS vulnerability at ohnemoesnixlos.de

Security researcher IHZTEAM, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting ohnemoesnixlos.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.ghf-lawfirm.com

Security researcher skathgh420, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.ghf-lawfirm.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It is...

Unfixed XSS vulnerability at www.discovercoloradorealestate.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.discovercoloradorealestate.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It...

Unfixed XSS vulnerability at www.incisivemedia.com

Security researcher mYSTICK, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.incisivemedia.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2008. It is...