Unfixed XSS vulnerability at www.darkgrup.org

Security researcher Kara, has submitted on 17/11/2007 a cross-site-scripting XSS vulnerability affecting www.darkgrup.org, which at the time of submission ranked 4468202 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currentl...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

Oracle 10g - CTX_DOC.MARKUP SQL Injection

Oracle 10g - CTXDOC.MARKUP SQL Injection // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr"...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-2427)

The SUN Java packages have been upgraded to 1.5.010 to fix various security problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update java-150-sun-2427. The text description of this plugin is ...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

HP-UX PHSS_36902 : s700_800 11.X OV NNM7.51 IA-64 Intermediate Patch 17

s700800 11.X OV NNM7.51 IA-64 Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute...

Unfixed XSS vulnerability at ekart.logindream.com

Security researcher Narcoticxs, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting ekart.logindream.com, which at the time of submission ranked 994951 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed Redirect vulnerability at searchina.ne.jp

Security researcher Narcoticxs, has submitted on 17/09/2007 a Redirect vulnerability affecting searchina.ne.jp, which at the time of submission ranked 9436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at www.travelserver.net

Security researcher BackDoor, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.travelserver.net, which at the time of submission ranked 348130 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at billgates.com

Security researcher x2Fusion, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting billgates.com, which at the time of submission ranked 743216 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at hackbloc.org

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting hackbloc.org, which at the time of submission ranked 655075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at zakka-zakka.net

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting zakka-zakka.net, which at the time of submission ranked 774951 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Fixed XSS vulnerability at www.cs.chalmers.se

Security researcher Norehem, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.cs.chalmers.se, which at the time of submission ranked 30640 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at cccccccccccccccccccccccc.com

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting cccccccccccccccccccccccc.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. ...

Unfixed XSS vulnerability at www.gamereactor.no

Security researcher SnigelSniper, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.gamereactor.no, which at the time of submission ranked 149074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Fixed XSS vulnerability at hope.6419.net

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting hope.6419.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...

Fixed XSS vulnerability at iis.dip.jp

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting iis.dip.jp, which at the time of submission ranked 3269 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...

Mozilla Foundation Security Advisory 2007-21

Mozilla Foundation Security Advisory 2007-21 Title: Privilege escallation using an event handler attached to an element not in the document Impact: Critical Announced: July 17, 2007 Reporter: mozbugra4 Products: Firefox Fixed in: Firefox 2.0.0.5 Description An attecker can use an element outside ...

HP System Management Homepage cross-site scripting vulnerability

Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...

GLSA-200705-17 : Apache mod_security: Rule bypass

The remote host is affected by the vulnerability described in GLSA-200705-17 Apache modsecurity: Rule bypass Stefan Esser discovered that modsecurity processes NULL characters as terminators in POST requests using the application/x-www-form-urlencoded encoding type, while other parsers used in we...