Unfixed XSS vulnerability at www.enteryourhours.com

Security researcher nullbyt3 XSS POC, has submitted on 08/07/2010 a cross-site-scripting XSS vulnerability affecting www.enteryourhours.com, which at the time of submission ranked 3821711 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

MySQL 3 Error Based SQLi

Ну, собственно, как я уже писал в теме "Шпаргалка", помимо запросов, предложенных Qwazar Код: union select 1,count,concatselect pass from users limit 1,0x3a,floorrand02 x from users group by x and row1,1select+count,concatselect pass from users limit 1,0x3a,floorrand02 x from users group by x lim...

SiteLoom CMS 21.07.2010 Cross Site Scripting

Vulnerability ID: HTB22516 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsiteloomcms.html Product: SiteLoom CMS Vendor: SiteLoom ApS http://www.siteloom.dk/ Vulnerable Version: Current at 21.07.2010 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: X...

Prado Portal 1.2.0 Cross Site Scripting

Vulnerability ID: HTB22515 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpradoportal.html Product: Prado Portal Vendor: Compudesign ApS http://www.pradoportal.dk/ Vulnerable Version: 1.2.0 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross...

Visual MP3 Splitter & Joiner 6.1(.mp3) Buffer Overflow POC

Exploit for windows platform in category dos / poc ========================================================== Visual MP3 Splitter & Joiner 6.1.mp3 Buffer Overflow POC ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

BXR 0.6.8 Cross Site Request Forgery / Cross Site Scripting / SQL Injection

============================================== Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vend...

Table2CSS Denial of Service PoC

Exploit for php platform in category dos / poc =============================== Table2CSS Denial of Service PoC =============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

K-Meleon For Windows 1.5.3 / 1.5.4 Stack Overflow

K-Meleon for windows about:neterror Stack Overflow DoS Vendor URL:http://kmeleon.sourceforge.net/ Advisore:http://lostmon.blogspot.com/2010/08/k-meleon-for-windows-aboutneterror-dos.html Vendor notified:Yes exploit available: YES K-Meleon is an extremely fast, customizable, lightweight web browse...

Amethyst 0.1.5 - Cross-Site Scripting

Amethyst 0.1.5 - Cross-Site Scripting Vulnerability ID: HTB22502 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst2.html Product: Amethyst Vendor: Hulihan Applications http://hulihanapplications.com/projects/amethyst Vulnerable Version: 0.1.5 and Probably Prior Versions Vendor...

Open Blog 1.2.1 - Cross-Site Request Forgery

Open Blog 1.2.1 - Cross-Site Request Forgery Vulnerability ID: HTB22496 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenblog.html Product: Open Blog Vendor: Tomaž Muraus http://www.open-blog.info/ Vulnerable Version: 1.2.1 and Probably Prior Versions Vendor Notification: 22 July 2010...

Amethyst v0.1.5 XSS Vulnerability

Exploit for php platform in category web applications ================================= Amethyst v0.1.5 XSS Vulnerability ================================= Vulnerability ID: HTB22502 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinamethyst2.html Product: Amethyst Vendor: Hulihan...

XSS vulnerability in Campsite

Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Sit...

MediaMonkey 3.2.1.1297 - Denial of Service (PoC)

Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Mediamonkey v. 3.2.1.1297 DOS POC

Exploit for windows platform in category dos / poc ================================= Mediamonkey v. 3.2.1.1297 DOS POC ================================= Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 author abhishek lyall -...

DiamondList v0.1.6 CSRF Vulnerability

Exploit for php platform in category web applications ===================================== DiamondList v0.1.6 CSRF Vulnerability ===================================== Vulnerability ID: HTB22517 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiamondlist.html Product: DiamondList Vendor:...

DiamondList 0.1.6 - Cross-Site Request Forgery

DiamondList 0.1.6 - Cross-Site Request Forgery Vulnerability ID: HTB22517 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiamondlist.html Product: DiamondList Vendor: Hulihan Applications http://hulihanapplications.com/projects/diamondlist Vulnerable Version: 0.1.6 and Probably Prior Versio...

Spider player .m3u playlist DOS POC

Exploit for windows platform in category dos / poc =================================== Spider player .m3u playlist DOS POC =================================== Spider player .m3u playlist DOS POC vulnerble application link http://spider-player.com/downloading?file=SpiderPlayer2.4.5Setup.exe tested...

Open Blog v1.2.1 CSRF Vulnerability

Exploit for php platform in category web applications =================================== Open Blog v1.2.1 CSRF Vulnerability =================================== Vulnerability ID: HTB22496 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenblog.html Product: Open Blog Vendor: Toma?? Muraus...

Team Johnlong RaidenTunes 2.1.1 Remote XSS Vulnerability

Exploit for php platform in category web applications ======================================================== Team Johnlong RaidenTunes 2.1.1 Remote XSS Vulnerability ======================================================== Title: Team Johnlong RaidenTunes 2.1.1 Remote Cross-Site Scripting...

eSmart-Vision Trading Multiple SQL Injection Exploit

Exploit for php platform in category web applications ========================================================== eSmart-Vision Trading Multiple SQL Injection Vulnerability ==========================================================...