litespeed-disclose.txt

| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...

LiteSpeed Web Server <= 3.2.3 Remote Source Code Disclosure Vuln

Exploit for multiple platform in category remote exploits ================================================================ LiteSpeed Web Server = 3.2.3 Remote Source Code Disclosure Vuln ================================================================ | | |--.-----.| .-----.'...

Unfixed XSS vulnerability at algarvepoker.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting algarvepoker.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is currently...

Unfixed XSS vulnerability at constructionjobseeker.com

Security researcher BackDoor, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting constructionjobseeker.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at www.bozovaeml.k12.tr

Security researcher CiCoSz, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting www.bozovaeml.k12.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currentl...

Unfixed XSS vulnerability at gabrieldedavid.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting gabrieldedavid.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at www.randallspears.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting www.randallspears.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.hackticaret.com

Security researcher 0ssi3, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.hackticaret.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is currently...

Unfixed Redirect vulnerability at www.beykozkurek.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.beykozkurek.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at objekt-market.com

Security researcher BackDoor, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting objekt-market.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently...

Unfixed XSS vulnerability at www.fraudcentral.org.uk

Security researcher www.r3t.n3t.nl, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.fraudcentral.org.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It ...

Unfixed XSS vulnerability at www.unicom.co.il

Security researcher BackDoor, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.unicom.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

Design/Logic Flaw

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

CVE-2007-4993

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

CVE-2007-4993

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

Unfixed XSS vulnerability at www.highlandwarriorsguild.com

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.highlandwarriorsguild.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. I...

DSquare Exploit Pack: D2SEC_XITAMI

Name| d2secxitami ---|--- CVE| CVE-2007-5067 Exploit Pack| D2ExploitPack Description| 0 Day Xitami Web Server 2.5c2 Stack Overflow Notes|...

Unfixed XSS vulnerability at www.resourcesandtrust.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.resourcesandtrust.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at janetthephotographer.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting janetthephotographer.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.neapolitanmusic.com

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.neapolitanmusic.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...