CVE-2008-6231

creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6998 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7000...

CVE-2008-6293

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6965 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6968 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6964...

MatPo Link 1.2b (Blind SQL Injection/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== MatPo Link 1.2b Blind SQL Injection/XSS Multiple Vulnerabilities ================================================================== Discovered by : Hakxer Type Gap : Blind...

CVE-2008-6294

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6964 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6965 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6968...

DoS vulnerability in Firefox, Internet Explorer and Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Denial of Service уязвимостях в браузерах Firefox, Internet Explorer и Google Chrome. Для которых я разработал универсальные эксплоиты для различных браузеров. Данные уязвимости является частью моего проекта Day of bugs in browsers 2...

CVE-2008-4883

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6937...

CVE-2008-4178

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6946 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6947 2008-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6951 2008-11-02...

CVE-2008-4895

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6935 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32563...

CVE-2009-4808

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6929 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8133...

CVE-2008-6927

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6897...

persiabme-sql.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Persia BME E-Catalogue SQL Injection Vulnerability Vendor: http://www.persiabme.com/products/ Impact: High Fix: N/A Original Advisory: http://www.bugreport.ir/index55.htm 1. Description: Persia BME E-Catalogue is a powerful engine which...

Persia BME E-Catalogue - SQL Injection

Persia BME E-Catalogue - SQL Injection www.BugReport.ir AmnPardaz Security Research Team Title: Persia BME E-Catalogue SQL Injection Vulnerability Vendor: http://www.persiabme.com/products/ Impact: High Fix: N/A Original Advisory: http://www.bugreport.ir/index55.htm 1. Description: Persia BME...

Sun Java Web Start 1.01.2 - Remote Command Execution

Sun Java Web Start 1.01.2 - Remote Command Execution source: https://www.securityfocus.com/bid/31916/info Sun Java Web Start is prone to a remote command-execution vulnerability. Successful exploits may allow attackers to execute arbitrary commands on an unsuspecting user's computer. This may aid...

MYBBS系统存在漏洞

1.用户注册功能页面没有针对无用户名注册的过滤用户注册功能页面没有针对用户名的长度的过滤用户注册功能页面没有针对无密码用户的过滤用户注册功能页面没有针对用户签名以及个人介绍的字数限制用户注册功能页面没有针对用户头像大小以及规格的限制 2.论坛版面最新回复所调用字数的限制论坛版面发表新文章的主题字数限制论坛版面发表新文章内容部分的字数限制论坛版面发表新文章针对JS的过滤 3.论坛短信功能页面没有针对发表人以及回复人的限制论坛短信功能页面对于JS恶意代码的过滤（JS代码嵌入漏洞论坛短信功能页面没有针对发表后页面的时间限制（可以导致无限制短信DOS...

CVE-2008-7267

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32524 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6823...

CVE-2008-6789

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6819 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6820...

Osprey 1.0a4.1 - ListRecords.php Multiple Remote File Inclusions

Osprey 1.0a4.1 - ListRecords.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/31883/info Osprey is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

CVE-2008-4652

creationtimestamp| type| source ---|---|--- 2008-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6793 2008-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6840...

Solaris 9 (UltraSPARC) - sadmind Remote Code Execution

Solaris 9 UltraSPARC - sadmind Remote Code Execution !/usr/bin/perl holygrail2 --------------------------------------------------------------------------------- SunOS 5.9 UltraSPARC sadmind Remote Root Exploit by KingCope in 2008 Most of work was shamelessy ripped from HD-Moore and RISE-Security...

Microsoft Windows AFD Exploits(ms08-066)

No description provided by source. include stdio.h include winsock2.h include windows.h pragma commentlib, "ws232.lib" define NTSTATUS int typedef struct PROCESSBASICINFORMATION NTSTATUS ExitStatus; PVOID PebBaseAddress; ULONG AffinityMask; ULONG BasePriority; ULONG UniqueProcessId; ULONG...