ClipShare 2.6 - Remote User Password Change

ClipShare 2.6 - Remote User Password Change !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User...

Unfixed XSS vulnerability at www.ufukhalisaha.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.ufukhalisaha.com, which at the time of submission ranked 3256534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It i...

"Forgot password" function allows easy misuse

The "Forgot password" function invents a new password and sends it by email. This invites to misuse as guessing the userid already allows to annoy or even lock-out the legitimate account owner. The user may currently not have access to his email account or the mail could be killed by a spam filte...

Unfixed Redirect vulnerability at www.zeybekler.net

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.zeybekler.net, which at the time of submission ranked 352214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.motour.ch

Security researcher Narcoticxs, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.motour.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at c2ch.glorious.mine.nu

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting c2ch.glorious.mine.nu, which at the time of submission ranked 1455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It i...

Unfixed XSS vulnerability at tickets.carrenza.net

Security researcher BackDoor, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting tickets.carrenza.net, which at the time of submission ranked 2542088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2007. It is...

Unfixed XSS vulnerability at portalavisos.com.ar

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting portalavisos.com.ar, which at the time of submission ranked 10006830 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/10/2007. It is...

Unfixed XSS vulnerability at www.turgutuzer.com

Security researcher Narcoticxs, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.turgutuzer.com, which at the time of submission ranked 3557301 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is...

Unfixed XSS vulnerability at www.fulldisclosure.net

Security researcher Mutant, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting www.fulldisclosure.net, which at the time of submission ranked 4460831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Unfixed XSS vulnerability at vibramovil.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting vibramovil.com, which at the time of submission ranked 391930 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It is currentl...

Unfixed XSS vulnerability at www.macrojuegos.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.macrojuegos.com, which at the time of submission ranked 5031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It is...

Unfixed XSS vulnerability at example.com.customers.tigertech.net

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting example.com.customers.tigertech.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. ...

Unfixed XSS vulnerability at www.profitux.cz

Security researcher KaBuS, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.profitux.cz, which at the time of submission ranked 30754 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Portcullis Security Advisory 06-040

Portcullis Security Advisory Vulnerable System: Visionsoft Audit Vulnerability Title: The VSAOD server has input validation flaws which can result in an unauthenticated heap overflow. Vulnerability discovery and development: Portcullis Security Testing Services discovered this vulnerability durin...

Unfixed XSS vulnerability at www.jucky29.com

Security researcher kusomiso.com, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.jucky29.com, which at the time of submission ranked 7060120 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Unfixed XSS vulnerability at hrant-ve-biz.org

Security researcher amele2, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting hrant-ve-biz.org, which at the time of submission ranked 1248403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2007. It is...

Unfixed XSS vulnerability at www.legoorin.com

Security researcher cyber, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.legoorin.com, which at the time of submission ranked 418235 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is currentl...

Unfixed XSS vulnerability at www.linux.org

Security researcher KaBuS, has submitted on 02/04/2007 a cross-site-scripting XSS vulnerability affecting www.linux.org, which at the time of submission ranked 16680 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2007. It is currently...

MattWrighttextcounter.pl远程执行命令漏洞 Exploit

No description provided by source. Doru Petrescu （[email protected]）提供了如下测试代码： -- cut here -- !/usr/bin/perl $URL='http://dtp.kappa.ro/a/test.shtml'; please DO modify this $EMAIL='[email protected],root'; please DO modify this if $ARGV0 $CMD=$ARGV0; else $CMD="ps ax;cd ..;cd ..;cd ..;cd etc;cat...