Unfixed XSS vulnerability at www.imeicc5.com

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.imeicc5.com, which at the time of submission ranked 23473560 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currentl...

Unfixed XSS vulnerability at www.feisheng99.com

Security researcher PlanetCreator, has submitted on 15/09/2009 a cross-site-scripting XSS vulnerability affecting www.feisheng99.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC

No description provided by source. !-- PPStream is the most huge p2p media player in the world. There are two hundred million ppstream users in the world. The vulnerability is exploitable,but I have no time to make it,you could visit my blog for detail.^@^ welcome to http://0dayexpose.blogspot.co...

Ve-EDIT 0.1.4 - 'highlighter' Remote File Inclusion

==================================================== | Ve-EDIT v 0.1.4 Remote File Include Vulne | My Home Page : WwW.Sec-Code.CoM | Founded By RoMaNcYxHaCkEr ==================================================== ! Discovered.: RoMaNcYxHaCkEr ! Vendor.....:...

Unfixed XSS vulnerability at wallpapers7.com

Security researcher Ravac, has submitted on 30/08/2009 a cross-site-scripting XSS vulnerability affecting wallpapers7.com, which at the time of submission ranked 2756637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/09/2009. It is currentl...

Unfixed XSS vulnerability at www.4to40.com

Security researcher Vinay Katoch, has submitted on 23/08/2009 a cross-site-scripting XSS vulnerability affecting www.4to40.com, which at the time of submission ranked 85649 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability

iDefense Security Advisory 08.11.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 11, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

Unfixed XSS vulnerability at bayby2000.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting bayby2000.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/07/2010. It is currently...

Unfixed XSS vulnerability at nato2000.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting nato2000.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currently...

Unfixed XSS vulnerability at www.habitat3.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting www.habitat3.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. It is currently...

Banner Exchange Script 1.0 (targetid) Blind SQL Injection Vuln

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Banner Exchange Script 1.0 targetid Remote Blind injection SQL + Software : Banner Exchange Script + Author : 599eme...

CVE-2009-2493

The Active Template Library ATL in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly...

CVE-2009-2493: Improper Control of Generation of Code

The Active Template Library ATL in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly...

WINMOD 1.4 - .lst Local Stack Overflow

WINMOD 1.4 - .lst Local Stack Overflow !/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win XP SP2 EN Download: http://www.software112.com/products/winmod+download.html print "\n==================================================\n"; print " Winmod 1...

Unfixed XSS vulnerability at darkdragon.site90.com

Security researcher nopic01, has submitted on 22/07/2009 a cross-site-scripting XSS vulnerability affecting darkdragon.site90.com, which at the time of submission ranked 42135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is...

Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (SEH)

-------------------- SkuLL-HacKeR ----------------- !/usr/bin/perl + Bug : Soritong MP3 Player 1.0 SKIN Local Stack Overflow Exploit SEH win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

AIX 520010 : U827250

The remote host is missing AIX PTF U827250 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Unfixed Frame Redirect vulnerability at www.lemon64.com

Security researcher Syst3m Cr4sh, has submitted on 14/07/2009 a Frame Redirect vulnerability affecting www.lemon64.com, which at the time of submission ranked 121971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...