Unfixed XSS vulnerability at www.cshonor.com

Security researcher PD, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting www.cshonor.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.jyzxsoft.com

Security researcher PD, has submitted on 14/04/2008 a cross-site-scripting XSS vulnerability affecting www.jyzxsoft.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/04/2008. It is currently unfixe...

Unfixed XSS vulnerability at www.wildaf.org

Security researcher Camilo-TcK, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.wildaf.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currently...

Unfixed XSS vulnerability at www.dooo.it

Security researcher death-angel, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.dooo.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currently...

Unfixed XSS vulnerability at www.theaa.com

Security researcher weetos, has submitted on 04/02/2008 a cross-site-scripting XSS vulnerability affecting www.theaa.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently...

Unfixed XSS vulnerability at www.dotmailer.co.uk

Security researcher Hanno Boeck, has submitted on 20/03/2008 a cross-site-scripting XSS vulnerability affecting www.dotmailer.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is...

zkup-admin.txt

!/usr/bin/php Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit-1; $url = $argv1; $log = $argv2; $pas = $argv3; $postit =...

zkup-upload.txt

!/usr/bin/php Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we can use administration without being admin see ./admin/configuration/modifier.php Then, when we add an admin, it is save...

Unfixed XSS vulnerability at www.yoyonappy.com

Security researcher SaMTHG, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.yoyonappy.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2008. It is currently...

zKup CMS 2.0 <= 2.3 Remote Add Admin Exploit

Exploit for unknown platform in category web applications ============================================ zKup CMS 2.0 Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/...

zKup CMS 2.0 2.3 - Remote Add Admin

zKup CMS 2.0 2.3 - Remote Add Admin !/usr/bin/php Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit-1; $url = $argv1; $log = $argv2; $pas = $argv...

zKup CMS 2.0 2.3 - Arbitrary File Upload

zKup CMS 2.0 2.3 - Arbitrary File Upload !/usr/bin/php Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we can use administration without being admin see ./admin/configuration/modifier.p...

openSUSE 10 Security Update : libcdio (libcdio-5061)

Long file names in ISO file systems with Joliet extension could cause a buffer overflow in libcdio CVE-2007-6613. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libcdio-5061. The text...

Stack overflow

Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing 1 pbrun, 2 pbsh, or 3 pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote...

CVE-2008-1056

Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing 1 pbrun, 2 pbsh, or 3 pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote...

Unfixed XSS vulnerability at www.scsmods.com

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.scsmods.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixe...

Unfixed XSS vulnerability at betapages.way-of-web.de

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting betapages.way-of-web.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currentl...

Unfixed XSS vulnerability at www.firstlegion.net

Security researcher Anonymous, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.firstlegion.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Important: cups security update

1.1.22-0.rc1.9.20.2:.5 - Prevented invalid memory accesses when a class and its singleton printer are timed out in the same sweep CVE-2008-0597, bug 433828. - Back-ported mimeDeleteType from 1.2.x CVE-2008-0596, bug 433828. 1.1.22-0.rc1.9.20.2:.4 - Prevent double-free when a browsed class has the...

Unfixed XSS vulnerability at www.guinor.ca

Security researcher CCC, has submitted on 16/02/2008 a cross-site-scripting XSS vulnerability affecting www.guinor.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently unfixed...