OSCommerce Online Merchant 2.2 Bypass / File Disclosure

-------------------------------------------- Oscommerce Online Merchant v2.2 File Disclosure And Admin ByPass -------------------------------------------- Author : Flyff666 Date : May, 30, 2010 Location : Tangerang, Indonesia Time Zone : GMT +7:00 Software : OsCommerce Online Merchant v2.2 Tested...

Unfixed XSS vulnerability at www.cnmm.nthu.edu.tw

Security researcher Xylitol, has submitted on 30/05/2010 a cross-site-scripting XSS vulnerability affecting www.cnmm.nthu.edu.tw, which at the time of submission ranked 37333 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

CVE-2010-2143

creationtimestamp| type| source ---|---|--- 2010-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12809...

aSimple Template (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ============================================================= aSimple Template XSS/URL Redirecting Multiple Vulnerability =============================================================...

CVE-2010-1725

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12468...

CVE-2010-1686

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12469...

CVE-2010-1726

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12459...

PAJAX - Remote Command Execution (Metasploit)

$Id: pajaxremoteexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

linux/x86 polymorphic forkbombe - 30 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 polymorphic forkbombe - 30 bytes ========================================== / Title: Linux x86 polymorphic forkbombe - 30 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org !...

[SECURITY] Fedora 13 Update: alienarena-7.33-2.fc13

Alien Arena 2009 is an online deathmatch game with over 30 levels, seven mo des of play, loads of mutators, built-in bots, multiple player characters and w eapons with alt-fire modes...

Mozilla Foundation Security Advisory 2010-19

Mozilla Foundation Security Advisory 2010-19 Title: Dangling pointer vulnerability in nsPluginArray Impact: Critical Announced: March 30, 2010 Reporter: regenrecht via TippingPoint's Zero Day Initiative Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Firefox 3.0.19 SeaMonkey...

Mozilla Foundation Security Advisory 2010-20

Mozilla Foundation Security Advisory 2010-20 Title: Chrome privilege escalation via forced URL drag and drop Impact: Critical Announced: March 30, 2010 Reporter: Paul Stone Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Firefox 3.0.19 SeaMonkey 2.0.4 Description Security...

Microsoft Releases Advance Notification for Out-of-Band Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that it will be releasing an out-of-band security bulletin. This bulletin will address a vulnerability in Microsoft Internet Explorer 6 and Internet Explorer 7. The notification states that release of this bulletin is...

CVE-2010-0632

creationtimestamp| type| source ---|---|--- 2010-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11294...

CVE-2010-0799

creationtimestamp| type| source ---|---|--- 2010-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11290...

CVE-2009-4582

creationtimestamp| type| source ---|---|--- 2009-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10807...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

!/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally discovered by prodigy exec calc.exe...

Pre Hospital Management System - 'department.php?id' SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: department.php id Remote SQL Injection Vulnerability ? Vendor:www.preproject.com/hms.asp ? ? Software:PRE HOSTPITAL MANAGEMENT SYSTEM ? Price $750.00 ? author: R3d-D3v!L ? ?Date: 16.dec.2009 ?T!ME: 11:30 p...

CVE-2009-4785

creationtimestamp| type| source ---|---|--- 2009-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10252...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Yahoo!...