Unfixed XSS vulnerability at smartphonemarket.nl

Security researcher OMEHA, has submitted on 09/05/2007 a cross-site-scripting XSS vulnerability affecting smartphonemarket.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It is currently...

Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit

Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...

Unfixed XSS vulnerability at www.netvoyager.ca

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.netvoyager.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is current...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...

BitchX 1.1 Final - MODE Remote Heap Overflow

BitchX 1.1 Final - MODE Remote Heap Overflow !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT...

Unfixed XSS vulnerability at www.endustrimuhendisim.com

Security researcher CiCoSz, has submitted on 27/08/2007 a cross-site-scripting XSS vulnerability affecting www.endustrimuhendisim.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/08/2007. It is...

Command injection

ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...

EDraw Office Viewer Component 5.1 - HttpDownloadFile() Insecure Method

EDraw Office Viewer Component 5.1 - HttpDownloadFile Insecure Method -------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.1 officeviewer.ocx v. 5.1.199.1 "HttpDownloadFile" Insecure Method url:...

Unfixed XSS vulnerability at ttongfly.net

Security researcher kusomiso.com, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting ttongfly.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is currently...

Cisco IOS Next Hop Resolution Protocol (NHRP) - Denial of Service

Cisco IOS Next Hop Resolution Protocol NHRP - Denial of Service // / / / nhrp-dos - Copyright by Martin Kluge, / / / / Feel free to modify this code as you like, as long as you include the / / above copyright statement. / / / / Please use this code only to check your OWN cisco routers. / / / /...

Unfixed XSS vulnerability at www.sorlandetutvandrersenter.no

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.sorlandetutvandrersenter.no, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It...

Unfixed XSS vulnerability at www.ebzb.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.ebzb.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Unfixed XSS vulnerability at xitearth.kicks-ass.org

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting xitearth.kicks-ass.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at secure.xynergy.org

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting secure.xynergy.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Unfixed XSS vulnerability at ronsloan.net

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting ronsloan.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Fixed XSS vulnerability at www.johnandjessica.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.johnandjessica.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at allstarfg.com

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting allstarfg.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently unfixe...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...