Fixed XSS vulnerability at www.researchsea.com

Security researcher FiSh, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting www.researchsea.com, which at the time of submission ranked 1145294 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

cjay-rfi.txt

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title Cjay Content 3 WYSIWYG IE 5.5+ Remote File Inclusion Vulnerability Description Editor module for XOOPS CMS Vuln Code In...

XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability

No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title Cjay Content 3 WYSIWYG IE 5.5+ Remote Fi...

XOOPS Module XT-Conteudo - spaw_root Remote File Inclusion

XOOPS Module XT-Conteudo - spawroot Remote File Inclusion / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title XT-Conteudo XOOPS Module Remote File Inclusion Vulnerability Description Content module for...

WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ======================================================================= WEBInsta FM 0.1.4 login.php absolutepath Remote File Inclusion Exploit ======================================================================= !/usr/bin/perl / \ / \ |...

Build not dead asp-Trojan-vulnerability warning-the black bar safety net

Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...

Fish多个远程缓冲区溢出漏洞

FiSH是很多流行的irc客户端所使用的用于实现加密的插件。 FiSH的xchat插件实现上存在多个缓冲区溢出漏洞，远程攻击者可能利用这些漏洞控制用户机器。 FiSH的xchat插件代码在处理入站数据时会注册4个函数： xchathookserverph, "PRIVMSG", XCHATPRINORM, decryptincoming, 0; xchathookserverph, "NOTICE", XCHATPRINORM, noticereceived, 0; xchathookserverph, "TOPIC", XCHATPRINORM, decryptincoming, 0;...

FiSH IRC clients encryption plugin multiple security vulnerabilities

Multiple buffer overflows on different IRC messages...

CVE-2007-1397

Multiple stack-based buffer overflows in the 1 ExtractRnick and 2 decrypttopic332 functions in FiSH allow remote attackers to execute arbitrary code via long strings...

Stack overflow

Multiple stack-based buffer overflows in the 1 ExtractRnick and 2 decrypttopic332 functions in FiSH allow remote attackers to execute arbitrary code via long strings...

CVE-2007-1397

Multiple stack-based buffer overflows in the 1 ExtractRnick and 2 decrypttopic332 functions in FiSH allow remote attackers to execute arbitrary code via long strings...

CVE-2007-1397

FiSH-irssi contains a vulnerability (CVE-2007-1397) with multiple stack-based buffer overflows in the ExtractRnick and decrypt_topic_332 functions that allow remote code execution via long strings. Public exploit material exists (PoC/exploit code) and related disclosures reference FiSH IRC encryp...

CVE-2007-1397: Undefined Security Weakness

Multiple stack-based buffer overflows in the 1 ExtractRnick and 2 decrypttopic332 functions in FiSH allow remote attackers to execute arbitrary code via long strings...

FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/22880/info FiSH is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit these issues to execute arbitrary...

fishcart-sql.txt

vendor site: http://fishcart.org/ product :fish cart bug:injection sql risk : medium injection sql : /display.php?cartid=200701210157208&zid=1&lid=1&olimit=5&cat=&key1=&nlst=y&olst='sql change the cartid value with yours laurent gaffie http://s-a-p.ca/ contact: [email protected]...

Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Pagetool CMS = 1.07 ptupload.php Remote File Include Vulnerability ====================================================================== !usr/bin/perl use...

CentOS 4 : kdebase (CESA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

kdebase security update

CentOS Errata and Security Advisory CESA-2006:0582 Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...

RHEL 4 : kdebase (RHSA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

Low: Red Hat Security Advisory: kdebase security fix

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...