Unfixed XSS vulnerability at www.moserbaerhomevideo.com

Security researcher Sandeep Kamble, has submitted on 28/11/2010 a cross-site-scripting XSS vulnerability affecting www.moserbaerhomevideo.com, which at the time of submission ranked 259950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed Redirect vulnerability at www.phpkode.com

Security researcher hexon, has submitted on 19/11/2010 a Redirect vulnerability affecting www.phpkode.com, which at the time of submission ranked 18843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/03/2011. It is currently unfixed. If you...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

CVE-2010-3528

Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 41, 9.0 Bundle 28, and 9.1 Bundle 4 allows remote authenticated users to affect confidentiality via unknown vectors...

Achievo 1.4.3 - Cross-Site Request Forgery

Advisory Name: Cross Site Request Forgery in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-03 Vulnerability Class: Cross Site Request Forgery Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable Affected Platforms: Any Local / Remote: Remote...

iworkstation Version 9.3.2.1.4 seh exploit

Exploit for windows platform in category local exploits ========================================== iworkstation Version 9.3.2.1.4 seh exploit ========================================== iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable...

smbind <= v.0.4.7 Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================= smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password...

Textpattern CMS 4.2.0 Remote File Inclusion

Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : [email protected] + Inj3ct0r Team Hacker + 28-8-201...

CVE-2010-3207

creationtimestamp| type| source ---|---|--- 2010-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14826...

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys 1.5.2.755 - Local Privilege Escalation Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp;...

Unfixed XSS vulnerability at www.mixmedia.pl

Security researcher cbr, has submitted on 28/07/2010 a cross-site-scripting XSS vulnerability affecting www.mixmedia.pl, which at the time of submission ranked 248693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is currently...

CVE-2010-2785

creationtimestamp| type| source ---|---|--- 2010-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34385...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0358-2)

Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once...

Fedora 12 : cups-1.4.2-28.fc12 (2010-3761)

This update addresses a denial of service security issue CVE-2010-0302 as well as fixing several other small problems: classes.conf is now updated when a class member is deleted. the usermode dependency has been removed. the udev rules are now installed in the correct location. cups-config now ha...

Linux/ARM - setuid0 & kill-1, SIGKILL 28 bytes

Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan...

DBSite w/b Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ DBSite w/b Blind SQL Injection Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Netartmedia iBoutique.MALL - SQL Injection

Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!Te,n4pst3rr greetz to...

Realtor Real Estate Agent - idproperty SQL Injection

Realtor Real Estate Agent - idproperty SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Home FTP Server 1.10.3 (build 144) - Denial of Service

Home FTP Server 1.10.3 build 144 - Denial of Service !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = "A" 5000 cmds =...

Unfixed XSS vulnerability at de.akinator.com

Security researcher Xylitol, has submitted on 28/05/2010 a cross-site-scripting XSS vulnerability affecting de.akinator.com, which at the time of submission ranked 12467 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currentl...