Lucene search
+L

2948 matches found

Exploit DB
Exploit DB
added 2010/05/05 12:00 a.m.22 views

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41132/info Cimy Counter for WordPress is prone to an HTTP response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scrip...

5.8AI score
SaveExploits0
Patchstack
Patchstack
added 2010/05/05 12:00 a.m.13 views

WordPress Cimy Counter Plugin 0.9.4 - HTTP Response Splitting and Cross-Site Scripting Vulnerabilities

This Cimy Counter plugin is prone to HTTP response-splitting and a cross-site scripting vulnerabilities. It fails properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

0.9AI score
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2010/04/20 3:39 p.m.13 views

Researcher Demos PDF Counter Attacks

Targeted attacks might be tough to prevent, but what if you could fight back against the attacker once he’s infiltrated your network? A researcher has come up with a proof-of-concept PoC that does just that by finding vulnerabilities in the attacker’s malware and using it against him. Read the fu...

2AI score
SaveExploits0References2
zdt
zdt
added 2010/03/10 12:00 a.m.28 views

Hit Counter 2.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================== Hit Counter 2.0 Cross Site Scripting Vulnerability ================================================== | Dork : Powered by Hit Counter v2.0 c eTek Systems | Tested on: windows SP2 Fran?§ai...

7.1AI score
SaveExploits0
Prion
Prion
added 2010/03/08 3:30 p.m.16 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

4.3CVSS6.1AI score0.01313EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2010/03/08 3:30 p.m.19 views

CVE-2010-0941

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

4.3CVSS5.8AI score0.01313EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2010/03/08 3:00 p.m.26 views

CVE-2010-0941

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

5.8AI score0.01313EPSS
SaveExploits1References7
CVE
CVE
added 2010/03/08 3:00 p.m.49 views

CVE-2010-0941

CVE-2010-0941 affects eTek Systems Hit Counter 2.0. The vulnerability is described as multiple cross-site scripting (XSS) flaws exploitable via PATH_INFO in four pages (index.php, inc/login.php, admin/index.php, admin/forgot.php). The reports indicate that remote attackers can inject arbitrary we...

4.3CVSS5.9AI score0.01313EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2010/02/10 2:30 a.m.31 views

CVE-2009-4633

vorbisdec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow...

10CVSS7.6AI score0.07947EPSS
SaveExploits2References15
OSV
OSV
added 2010/02/10 2:30 a.m.12 views

CVE-2009-4633

vorbisdec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow...

7.6AI score
SaveExploits0References15
Packet Storm
Packet Storm
added 2010/01/07 12:00 a.m.31 views

MobPartner Counter Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/01/07 12:00 a.m.30 views

PNG Counter 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

SaveExploits0
zdt
zdt
added 2010/01/06 12:00 a.m.117 views

MobPartner Counter - Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================== MobPartner Counter - Remote File Upload Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/01/06 12:00 a.m.47 views

MobPartner Counter - Arbitrary File Upload

MobPartner Counter - Arbitrary File Upload MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : "MobPartner Counter" "upload files" The exploit : http://localhost/path/upload.php edit she...

0.7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/01/04 12:00 a.m.27 views

Hit Counter Cross Site Scripting

======================================================================================== | Title : Hit Counter Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 4 ...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/12/01 12:00 a.m.16 views

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.2AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/12/01 12:00 a.m.18 views

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. OpenVAS Vulnerability Test $Id: PowerPhloggerdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PowerPhlogger Detection Authors: Michael Meyer Copyright: Copyright c 2009...

7.2AI score
SaveExploits0References1
securityvulns
securityvulns
added 2009/11/26 12:00 a.m.39 views

Уязвимость в работе протокола Counter-Strike

Используя небезопасный транспорт, который обеспечивает UDP протокол при игре в Counter-Strike, а так же сам протокол взаимодействия между клиентом и сервером Counter-Strike, можно без труда выбрасывать игроков с сервера без каких либо прав. Для демонстрации я буду использовать nemesis и wireshark...

7.2AI score
SaveExploits0
securityvulns
securityvulns
added 2009/11/26 12:00 a.m.33 views

Counter Strike game server DoS

Protocol is not protected against blind command injection, making it's possible to e.g. terminate any client's game by spoofing "quit" packet blindly...

2.5AI score
SaveExploits0References1Affected Software1
Prion
Prion
added 2009/10/11 10:30 p.m.16 views

Sql injection

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

7.5CVSS9.1AI score0.00928EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder