Unfixed XSS vulnerability at www.immobiliarediamante.com

Security researcher Trueliarx, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.immobiliarediamante.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It i...

Unfixed XSS vulnerability at www.ufpl.fr

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.ufpl.fr, which at the time of submission ranked 5725712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

Unfixed XSS vulnerability at www.ascension-tech.com

Security researcher Trueliarx, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.ascension-tech.com, which at the time of submission ranked 3643517 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It ...

Adobe Reader 11.0.0 - Stack Overflow Crash (PoC)

Title : Adobe Reader 11.0.0 Stack overflow Version : 11.0.0.379 Date : 2012-11-01 Vendor : http://www.adobe.com/ Impact : Med Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows 7 X64 ENG Author : coolkaveh Bug : ---- Don't forget that exploitable bugs will be published...

Unfixed XSS vulnerability at publications.univ-st-etienne.fr

Security researcher Atmon3r, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting publications.univ-st-etienne.fr, which at the time of submission ranked 149236 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/201...

Unfixed Redirect vulnerability at www.nagt.org

Security researcher p0pc0rn, has submitted on 11/01/2012 a Redirect vulnerability affecting www.nagt.org, which at the time of submission ranked 9603492 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If you...

Unfixed Redirect vulnerability at locallily.com

Security researcher p0pc0rn, has submitted on 11/01/2012 a Redirect vulnerability affecting locallily.com, which at the time of submission ranked 4640448 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If yo...

Unfixed Redirect vulnerability at www.sayit.ie

Security researcher p0pc0rn, has submitted on 11/01/2012 a Redirect vulnerability affecting www.sayit.ie, which at the time of submission ranked 3901676 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If you...

Unfixed XSS vulnerability at demo.oxylustemplates.com

Security researcher Atmon3r, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting demo.oxylustemplates.com, which at the time of submission ranked 196946 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It i...

Unfixed XSS vulnerability at www.hotcdljobs.com

Security researcher Atmon3r, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting www.hotcdljobs.com, which at the time of submission ranked 2395409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at openclipart.org

Security researcher warvector, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting openclipart.org, which at the time of submission ranked 16595 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

phpMyAdmin 3.5.2.2 - 'server_sync.php' Backdoor (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'phpMyAdmin 3.5.2.2 serversync.ph...

Unfixed XSS vulnerability at www.floraselect.co.uk

Security researcher Atmon3r, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.floraselect.co.uk, which at the time of submission ranked 2889438 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.cadoons-boutique.com

Security researcher Atmon3r, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.cadoons-boutique.com, which at the time of submission ranked 710303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It i...

Unfixed XSS vulnerability at www.seattlejobs.org

Security researcher IrIsT.Ir, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.seattlejobs.org, which at the time of submission ranked 4582935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It is...

SourceForge Investigates Backdoor Code Found in Copy of phpMyAdmin

The popular open-source repository SourceForge is investigating how a corrupted copy of phpMyAdmin came to be served from a Korean-based mirror. Logs indicate 400 users downloaded the malicious file before it was removed from rotation today. “One of the SourceForge.net mirrors, namely...

phpMyAdmin 3.5.2.2 server_sync.php Backdoor

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'phpMyAdmin 3.5.2.2 serversync.ph...

phpMyAdmin 3.5.2.2 server_sync.php Backdoor

Exploit for php platform in category web applications $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/cor...

phpMyAdmin 'server_sync.php'远程后门漏洞

BUGTRAQ ID: 55672 CVE ID: CVE-2012-5159 phpMyAdmin是一个用PHP编写的，可以通过web方式控制和操作MySQL数据库。 phpMyAdmin通过"cdnetworks-kr-1" SourceForge mirror系统分发的phpMyAdmin 3.5.2.2及其他版本源文件为phpMyAdmin-3.5.2.2-all-languages.zip，其中包含名为serversync.php的木马，可允许远程攻击者通过调用eval攻击执行任意命令。 0 phpMyAdmin 3.5.2.2 厂商补丁： phpMyAdmin...

CVE-2012-5159

phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification Trojan Horse in serversync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack...