Really innocent? Peep Serv-U password-cracking-vulnerability warning-the black bar safety net

Now the invasion, get a WebShell is a very easy thing, especially with the WHOIS technical disclosure obtained after the WebShell is even more simple. There are times when the other server is set to be not very sick, we can use directly enter the hard drive path, so as to obtain access to access ...

Unfixed XSS vulnerability at www.selfseo.com

Security researcher C1c4Tr1Z, has submitted on 19/03/2008 a cross-site-scripting XSS vulnerability affecting www.selfseo.com, which at the time of submission ranked 39848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/05/2008. It is current...

mattswhois-xss.txt

+==============================================================================+ + Matt's Whois mwhois.php - ALL Versions XSS Multiple Remote Vulnerabilities + +==============================================================================+ Authors: Ivan Sanchez & Maximiliano Soler. Product: MWho...

Unfixed XSS vulnerability at www.domaintechs.com

Security researcher X-Turk, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.domaintechs.com, which at the time of submission ranked 4481278 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...

internic-xss.txt

Title : InterNIC WHOIS lookup XSS exploit Description : InterNIC has a WHOIS lookup function wich suffers from an XSS vulnerability Author : Tosser Contact : [email protected] Proof : http://reports.internic.net/cgi/whois?whoisnic=%3Ciframe%20src=%22javascript:alert'XSS'%22%3E&type=domain or go to...

Microsoft Windows Explorer - '.GIF' Image Denial of Service

!/usr/bin/perl Bug Found By ::DeltahackingTEAM Coded By Reza.Yavari Dr.Pantagon Web Site::Www.Deltahacking.net And Www.DeltaSecurity.ir And Www.PersianWhois.com Free Upload :: Www.Persianupload.com And Www.Persianupload.net Email: Dr.Pantagon ADeltasecurity.ir We...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2965

Particle Soft Particle Whois 1.0.3 is affected by multiple XSS flaws where unsanitized input can be injected via (1) the target parameter in index.php and (2) the input box. The root cause is improper handling of user-supplied data leading to script/HTML execution in the victim’s browser. Publicl...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2005-4699

Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the qHost parameter...

PT-2005-5364 · Tellme · Tellme

Name of the Vulnerable Software and Affected Versions: TellMe versions 1.2 and earlier Description: The issue allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q Host parameter. Recommendations: For TellMe...

Domain name hijacking---1 6 3. net is the h analysis-vulnerability warning-the black bar safety net

Some time ago, 1 6 3. net is black, in the industry to engage in a boiling boiling Teng to. Actually, it's not his fault. The error is that the Internic is. The following section is compiled from packetstorm. 1 6 3 is blackartreferred to asnamehijacking（hijacked）, thetechnicalis very simple, the...

CVE-2002-1854

Rlaj whois CGI script whois.cgi 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field...

remote command execution in 'tattle'

Hello, a recent bugtraq posting by CISSP C.J. Steele contains a vulnerability which will leave a box possibly open for remote command execution. There are many ways to exploit this, but I chose logging in through ftp with username like sshd rhost 9 10 11 |rm$IFS-rf$IFS/|echo'1.1.1.1' because of...

CVE-2002-1364

CVE-2002-1364 describes a buffer overflow in traceroute-nanog’s get_origin() function triggered by long WHOIS responses. This leads to arbitrary code execution and potential privilege escalation on affected systems. Public advisories (Debian DSA-254-1) note the issue was fixed in traceroute-nanog...

CVE-2002-1364

Buffer overflow in the getorigin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses...

CVE-2003-0709

Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...

CVE-2003-0709

Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...