3719 matches found
Unfixed XSS vulnerability at www.ogame.org
Security researcher THE-SH0CK-B0Y, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.ogame.org, which at the time of submission ranked 9217 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...
Unfixed XSS vulnerability at www.randomwebsearch.com
Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.randomwebsearch.com, which at the time of submission ranked 496840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...
Unfixed XSS vulnerability at www.ogame.com.tr
Security researcher THE-SH0CK-B0Y, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.ogame.com.tr, which at the time of submission ranked 7547 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2007. It is...
Unfixed XSS vulnerability at www.roxter.pl
Security researcher BackDoor, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.roxter.pl, which at the time of submission ranked 62300 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is currently...
Unfixed XSS vulnerability at www.ogame.ru
Security researcher THE-SH0CK-B0Y, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.ogame.ru, which at the time of submission ranked 25482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...
Unfixed XSS vulnerability at www.hcare.org
Security researcher MaXWeL, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.hcare.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is currently...
edraw-unsafe.txt
2007/05/28 ----------------------------------------------------------------------------------------------- EDraw Office Viewer Component edrawofficeviewer.ocx v. 4.0.5.20 Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnaiatautisticidotorg site:...
EDraw Office Viewer Component Unsafe Method Exploit
Exploit for unknown platform in category remote exploits =================================================== EDraw Office Viewer Component Unsafe Method Exploit =================================================== 2007/05/28...
Unfixed XSS vulnerability at kisiselbasari.com
Security researcher St@rExT, has submitted on 28/02/2007 a cross-site-scripting XSS vulnerability affecting kisiselbasari.com, which at the time of submission ranked 58362 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...
Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit
Exploit for unknown platform in category web applications ================================================================== Xpression News 1.0.1 archives.php Remote File Disclosure Exploit ================================================================== r0ut3r Presents... Another r0ut3r...
Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit
No description provided by source. r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com XNews Remote File Disclosure Exploit Software: Xnews 1.0.1 Vendor: http://xpression.hogsmeade-village.com/ Released: 2007/01/28 Discovered & Exploit By: r0ut3r writ3...
Xpression News 1.0.1 - archives.php Remote File Disclosure
Xpression News 1.0.1 - archives.php Remote File Disclosure r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com XNews Remote File Disclosure Exploit Software: Xnews 1.0.1 Vendor: http://xpression.hogsmeade-village.com/ Released: 2007/01/28 Discovered & Exploit By: r0ut3r writ3r at...
Xpression News 1.0.1 - 'archives.php' Remote File Disclosure
r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com XNews Remote File Disclosure Exploit Software: Xnews 1.0.1 Vendor: http://xpression.hogsmeade-village.com/ Released: 2007/01/28 Discovered & Exploit By: r0ut3r writ3r at gmail.com...
Sun Solaris Loopback文件系统本地拒绝服务漏洞
Sun Solaris是一款商业性质的操作系统。 Sun Solaris Loopback文件系统存在安全问题，本地攻击者可以利用漏洞删除或者重命名文件。 在非全局域中的本地特权用户可以删除或重命名只读挂接的loopback文件系统中的文件。此文件系统与全局域共享，可导致全局域中的文件删除。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10.0 x86 Sun 118855-28 http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h...
Gentoo Linux Acme Thttpd文件访问信息泄露漏洞
Gentoo Linux是一个基于源码包的Linux系统。 Gentoo的www-servers/thttpd软件包实现上存在漏洞，远程攻击者可能利用此漏洞非授权获取敏感信息。 如果在新的Gentoo baselayout中使用start-stop-daemon命令的话，就会导致thttpd在启动时将文档根设置为系统的根目录“/”，这允许非授权用户远程访问thttpd进程可读的所有系统文件。 Gentoo Linux 1.12.6 临时解决方法：...
navicopa.meta.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
phpBB2 Plus 1.53 - Acronym Mod SQL Injection
Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-1%20UNION%20SELECT%20null,userpassword,null%20FROM%20phpbbusers%20where%20userid=2&sid=AdminHash Greetz: str0ke , Dr Ma...
Solaris 9 (x86) : 115615-28
Sun JavaTM System Directory Server 5.2 patch 6 : Solarisx86. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 8 (sparc) : 115614-28
Sun JavaTM System Directory Server 5.2 patch 6 : Solaris sparc. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
