Retrieving the COM class factory for component with CLSID {xxxxxxxx} failed due to the following error: 800700c1.

Creating or copying folders with Veeam FastSCP 3.0.3 fails with the error: Retrieving the COM class factory for component with CLSID xxxxxxxx failed due to the following error: 800700c1...

[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

STHS v2 Web Portal 2.2 SQL Injection

================================================= STHS v2 Web Portal 2.2 SQL Injection Vulnerabilty ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 . 3 7 \ \ || / \ 7 1 | | \ | | / /\ / / \ / \ / \ 1 3 | | | \ \ / / ...

Joomla Component (com_bnf) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component combnf SQL Injection Vulnerability Google Dork: index.php?option=combnf Date: 22/12/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Tested on:...

Unfixed XSS vulnerability at www.homeshop18.com

Security researcher Vijayendra Nigam, has submitted on 26/01/2012 a cross-site-scripting XSS vulnerability affecting www.homeshop18.com, which at the time of submission ranked 1986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It ...

Null pointer dereference

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

Unfixed XSS vulnerability at www.cappa27.com

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.cappa27.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Unfixed XSS vulnerability at www.photo400.com

Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.photo400.com, which at the time of submission ranked 4282713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. It is...

Look411.com Cross Site Scripting

WhiteHatZone Vulnerable : http://www.look411.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://www.look411.com/?p=numbersearch&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E&country=US Greetz : Vidit Baxi, Sumit Pareek...

One million pages infected by Lilupophilupop SQL injection

One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...

Unfixed XSS vulnerability at busca.r7.com

Security researcher NetFuzzer, has submitted on 22/12/2011 a cross-site-scripting XSS vulnerability affecting busca.r7.com, which at the time of submission ranked 1011 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently...

Adobe Shockwave NPAPI Plug-in Drag and Drop Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the NPAPI version of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Unfixed XSS vulnerability at www.56770.com

Security researcher p0pc0rn, has submitted on 14/12/2011 a cross-site-scripting XSS vulnerability affecting www.56770.com, which at the time of submission ranked 459802 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

PHP 5. x COM functions to mention the right vulnerability-vulnerability warning-the black bar safety net

PHP is“hypertext pre-processing language”for Hypertext Preprocessor acronym, is an HTML embedded language. It can be more than the CGI or Perl more rapid implementation of dynamic web pages. PHP has a very powerful function, all of CGI or JavaScript functions, PHP can be achieved, supports almost...

Microsoft Windows Multiple COM Binary Planting Vulnerabilities (MS11-076; CVE-2011-1991; CVE-2011-2009)

The vulnerabilities are due to the way Windows COM servers improperly restrict the paths used when loading external libraries. A remote attacker may exploit these vulnerabilities by enticing an unsuspecting user to open a specially crafted file from a WebDAV or an SMB shareSuccessful exploitation...

[SECURITY] Fedora 16 Update: xulrunner-6.0.2-1.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Sardus SQL Injection

==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

[SECURITY] Fedora 16 Update: xulrunner-6.0-1.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Unfixed XSS vulnerability at calc.m0hi1.com

Security researcher Sony, has submitted on 15/08/2011 a cross-site-scripting XSS vulnerability affecting calc.m0hi1.com, which at the time of submission ranked 12736290 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

科讯 6.x - 7.06 SQL 注射漏洞

简要描述： 详细说明： Author:my5t3ry 转载请注明：t00ls.net 漏洞位于注册页面的\User\Reg\RegAjax.asp 中的24 - 46行 和 254 -270 行 代码如下： Class AjaxCheck Private KS Private Sub ClassInitialize Set KS=New PublicCls End Sub Private Sub ClassTerminate Set KS=Nothing End Sub Public Sub Kesion Select Case KS.S"Action" Case...