Unfixed XSS vulnerability at www.brooksbrothers.com

Security researcher tenest, has submitted on 23/10/2009 a cross-site-scripting XSS vulnerability affecting www.brooksbrothers.com, which at the time of submission ranked 27361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

Joomla! Component Jshop - SQL Injection

/ Joomla Component comjshop SQL Injection Vulnerability Author : Don Tukulesto [email protected] Homepage : http://www.indonesiancoder.com Date : October 23, 2009 Tune In : http://antisecradio.fm choose your weapon / + Dork : inurl:"kaMtiEz"+"tukulesto" + Price : FREE Open Source Content...

MindSculpt CMS - SQL Injection

MindSculpt CMS - SQL Injection MindSculpt's new CMS™ Content Management System SQL injection vulnerability - cid0 Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 23, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9...

Solaris Update for libpng 137080-03

Check for the Version of libpng OpenVAS Vulnerability Test Solaris Update for libpng 137080-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Unfixed XSS vulnerability at www.e-commsolutions.com

Security researcher redlover, has submitted on 23/09/2009 a cross-site-scripting XSS vulnerability affecting www.e-commsolutions.com, which at the time of submission ranked 17111881 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It...

CVE-2009-3898

creationtimestamp| type| source ---|---|--- 2009-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9829...

Joomla / Mambo Tupinambis SQL Injection

Exploit for unknown platform in category web applications ===================================== Joomla/Mambo Tupinambis SQL Injection ===================================== Mambo/Joomla SQL Injection Vulneralbility Component : comtupinambis Release : September 23, 2009...

Mambo / Joomla Tupinambis SQL Injection

Mambo/Joomla SQL Injection Vulneralbility Component : comtupinambis Release : September 23, 2009 -------------------------------------------------- .---..-..-..-.,-..-..-..-. .---..---..---..----. | |'| || || . | || || | | |- \ \ | |'| || | -' ----'-'-'----'----'---'---' -' ----'...

win32/xp sp2 (En) cmd.exe 23 bytes

No description provided by source. / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 En get the following if we disassemle this code compiled with olly debugger 00402000 8BEC MOV EBP,E...

win32/xp sp2 En cmd.exe 23 bytes

win32/xp sp2 En cmd.exe 23 bytes. Shellcode exploit for win32 platform / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 En get the following if we disassemle this code compiled with...

JVN#93827000 Tree BBS from Let's PHP! vulnerable to cross-site scripting

Tree BBS from Let's PHP! is a tree-structured bulletin board software. Tree BBS contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by t...

Fixed XSS vulnerability at www.vpnwars.com

Security researcher m4x, has submitted on 23/05/2009 a cross-site-scripting XSS vulnerability affecting www.vpnwars.com, which at the time of submission ranked 256383 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2009. It is currently...

IBM WebSphere Application Server < 6.1.0.23 Multiple Flaws

IBM WebSphere Application Server 6.1 before Fix Pack 23 appears to be installed on the remote host. Such versions are reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - It may be possible...

CVE-2009-2310

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8258...

CVE-2009-2309

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8272...

CVE-2009-1238

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8265...

win32 telnetbind by winexec 111 bytes

No description provided by source. ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The Sh3llcode: ;...

win32 telnetbind by winexec 111 bytes

win32 telnetbind by winexec 111 bytes. Shellcode exploit for win32 platform ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The...

CVE-2009-0071

creationtimestamp| type| source ---|---|--- 2009-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8091...

CVE-2009-0471

Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...