ris-xss.txt

Hi folks, Description: RIS is a public accessable web application to search/browse Austrian laws, provided by the Government of Austria. It is vulnerable for XSS via a malformed search query. POC: http://www.ris.bka.gv.at/taweb-cgi/taweb?q=%3Cscript%3Ealert1;%3C/script%3E&x=r&v=lroo&o=&db3=LROO...

Unfixed XSS vulnerability at www.governmentcontractswon.com

Security researcher RubberDuck, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.governmentcontractswon.com, which at the time of submission ranked 297138 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit

Exploit for unknown platform in category remote exploits ======================================================== AEP SmartGate 4.3b GET Arbitrary File Download Exploit ======================================================== / prdelka-vs-AEP-smartgate ======================== Smartgate is an...

The Central People's Government portal gov. cn small BUG-vulnerability warning-the black bar safety net

To view the source file. Didn't find the asp. Home like The are htm. Then just find a linkhttp://www. gov. cn/banshi/wjrs/lssf. htm. There is a search, I see the source of the file also didn't find the action words. It seems like there is a jsp linkslater found. And then enterscriptalert"wolf...

[Full-disclosure] NIC Chile CGI Script Zone Transfers

NIC Chile CGI Script Zone Transfers. Autor: Rodrigo Gutierrez rodrigo at intellicomp.cl Affected: All ".cl" domains which use NIC's Chile Secondary NS. Vendor url: http://www.nic.cl Rate: Critical Background. NIC Chile is a part of the University of Chile and is in charge of handling all the...

frame.spoof.txt

Date: Thu, 18 Feb 1999 10:36:49 PST From: Robert Thomas To: [email protected] Subject: Re: Netscape Communicator window spoofing bug -Junk deleted- This was reported back in the November, December time frame by secureexperts.com as a frame spoof bug. MS came up with a lame patch for IE that...