Unfixed XSS vulnerability at www.hazirslayt.com

Security researcher M-Ray, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.hazirslayt.com, which at the time of submission ranked 4521497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at istanbul.adreseyemek.com

Security researcher M-Ray, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting istanbul.adreseyemek.com, which at the time of submission ranked 201068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit

/ 0day Discovered by: C-W-M Auther: C-W-M Www.MeftunNet.Com & Www.HackerSecurity.Org Location : Turkey... Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user ...

phpmynewsletter-rfi.txt

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Exploit : °°°°°°°°°...

CA BrightStor Backup 11.5.2.0 (Mediasvr.exe) Remote Code Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Exploit Previously Unknown There seems to be an design error in the handling of RPC data with xdr procedures across several .dll's imported by Mediasvr.exe. Four bytes from an RPC...

caid-msgeng.txt

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow

CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...

CVE-2007-1485: Undefined Security Weakness

Buffer overflow in the setumask function in QFTP in LIBFtp 3.1-1 allows local users to execute arbitrary code via a long -m argument. NOTE: CVE disputes this issue because QFTP is not setuid, and it is unlikely that there are web interfaces to QFTP that would accept untrusted command line argumen...

SaphpLesson v3.0 SQL Injection Exploit

//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...

Unfixed XSS vulnerability at www.doldurkupu.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.doldurkupu.com, which at the time of submission ranked 5625340 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.videozel.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.videozel.com, which at the time of submission ranked 6181360 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...

Unfixed XSS vulnerability at nursingcenter.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting nursingcenter.com, which at the time of submission ranked 173148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...

Unfixed XSS vulnerability at www.firmaekle.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.firmaekle.com, which at the time of submission ranked 2292456 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at roundrockchamber.org

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting roundrockchamber.org, which at the time of submission ranked 2714412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.turizmhaberleri.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.turizmhaberleri.com, which at the time of submission ranked 394768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at festivallerimiz.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting festivallerimiz.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...

Unfixed XSS vulnerability at www.japantravelinfo.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.japantravelinfo.com, which at the time of submission ranked 411637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Fixed XSS vulnerability at www.icu-project.org

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.icu-project.org, which at the time of submission ranked 411508 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.indirbunu.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.indirbunu.com, which at the time of submission ranked 6898460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

MOAB-25-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...