Unfixed XSS vulnerability at www.c63.cn

Security researcher St@R-gaZ3r, has submitted on 10/11/2007 a cross-site-scripting XSS vulnerability affecting www.c63.cn, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is currently...

Unfixed XSS vulnerability at www.sj66.cn

Security researcher BackDoor, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting www.sj66.cn, which at the time of submission ranked 26057 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Ruby Net::HTTPS library does not validate server certificate CN

The 1 Net::ftptls, 2 Net::telnets, 3 Net::imap, 4 Net::pop, and 5 Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName CN field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL...

Ruby Net::HTTPS library certificates validation cryptographic vulnerability

Certificate's CN field is not validated against DNS name, making it's possible to use valid certificate with wrong CN...

Ruby Net::HTTPS library does not validate server certificate CN

The connect method in lib/net/http.rb in the 1 Net::HTTP and 2 Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName CN field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions v...

php 5.2.3 localexploit for win-vulnerability warning-the black bar safety net

Ghost earners note: the compressed package there are two files, respectively snmpexploit.php References //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //by GaRY wofeiwoatgmaildotcom //Based on by shinnai //Just change the shellcode //Tested on xp Pro sp2 cn...

Unfixed XSS vulnerability at www.fi365.cn

Security researcher DerickTham, has submitted on 07/12/2007 a cross-site-scripting XSS vulnerability affecting www.fi365.cn, which at the time of submission ranked 214467 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is current...

Unfixed XSS vulnerability at www.nz666.cn

Security researcher DerickTham, has submitted on 07/12/2007 a cross-site-scripting XSS vulnerability affecting www.nz666.cn, which at the time of submission ranked 628542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is current...

Unfixed XSS vulnerability at acp2.cn

Security researcher kusomiso.com, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting acp2.cn, which at the time of submission ranked 10113751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currentl...

Unfixed XSS vulnerability at www.xp21.cn

Security researcher kusomiso.com, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.xp21.cn, which at the time of submission ranked 3795381 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Unfixed XSS vulnerability at www.vicky-7.cn

Security researcher kusomiso.com, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.vicky-7.cn, which at the time of submission ranked 2122205 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

No description provided by source. Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN http://www.milw0rm.com/sploits/06272007-2670.zip sebug.net...

Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

Exploit for unknown platform in category dos / poc ====================================================== Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC ====================================================== Tested on: Full Patched Excel 2003 Sp2, CN http://www.inj3ct0r.com/sploits/6415.z...

Microsoft Excel 2000/2003 - Sheet Name (PoC)

Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...

w3m browser format string vulnerability

Format string culnerability on certificate CN field...

Microsoft IE CHTSKDIC.DLL COM对象实例化拒绝服务漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在试图将CHTSKDIC.DLL（Microsoft IME）COM对象实例化为ActiveX控件时可能会破坏系统内存，导致拒绝服务。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...

MS Internet Explorer (VML) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= MS Internet Explorer VML Remote Buffer Overflow Exploit ========================================================= /...

CVE-2006-4219

The CVE-2006-4219 entry concerns the Terminal Services COM object tsuserex.dll. Affected component: tsuserex.dll (ActiveX object) invoked by Internet Explorer 6.0 SP1 on Windows 2003 EE SP1 CN. Root cause/impact: remote attackers could crash the system and possibly execute arbitrary code by insta...

CVE-2006-4219

The Terminal Services COM object tsuserex.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN...