2770 matches found
PHP Paid 4 Mail Script Remote File Inclusion
\ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 = PHP Paid 4 Mail Script File Inclusion vuln Vendor : http://www.shop-020.de Script : PHP Paid 4 Mail Script Download : http://www.shop-020.de/phpscriptat-p25h4s5-PHP-Paid-4-Mail-Scri.html Author : intmain; Contact :...
openSUSE Security Update : novell-ipsec-tools (novell-ipsec-tools-1007)
This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...
Unfixed XSS vulnerability at www.hit95.de
Security researcher SuRRuX, has submitted on 16/05/2009 a cross-site-scripting XSS vulnerability affecting www.hit95.de, which at the time of submission ranked 11998074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2009. It is currently...
SA-CONTRIB-2009-021 CCK comment reference - Cross site scripting
CCK comment reference project, lets administrators define node fields that are references to comments. When displaying a node edit form, the titles of candidate referenced comments are not properly filtered, allowing malicious users to inject arbitrary code on those pages. Such a cross site...
De-perimeterization and open standards
From Cnet, by Jon Oltsik The openness and universal connectivity that helped break down the barriers between coporate networks has also turned out to be a security liability. Jon Oltsik, an analyst at Enterprise Strategy Group, writes that there’s now a need for open standards in security Cnet...
Unfixed XSS vulnerability at de-toplist.de
Security researcher derDude, has submitted on 30/03/2009 a cross-site-scripting XSS vulnerability affecting de-toplist.de, which at the time of submission ranked 239828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is currently...
Unfixed XSS vulnerability at www.institut-de-france.fr
Security researcher Xylitol, has submitted on 03/05/2009 a cross-site-scripting XSS vulnerability affecting www.institut-de-france.fr, which at the time of submission ranked 1730827 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/05/2009. It...
Lore 1.5.6 (article.php) Blind SQL Injection Exploit
No description provided by source. ? / CURL HABILITADO Blind Sql Injections Script Version : Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias...
Unfixed XSS vulnerability at fan-de-niny08.blogactifs.com
Security researcher 599eme Man, has submitted on 01/07/2009 a cross-site-scripting XSS vulnerability affecting fan-de-niny08.blogactifs.com, which at the time of submission ranked 2673869 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at web52.gidw4.gid24.de
Security researcher .virex, has submitted on 12/04/2008 a cross-site-scripting XSS vulnerability affecting web52.gidw4.gid24.de, which at the time of submission ranked 1959983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is...
FreeBSD Ports: wordpress, de-wordpress, wordpress-mu
The remote host is missing an update to the system as announced in the referenced advisory. VID 622bc638-be27-11dd-a578-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 622bc638-be27-11dd-a578-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: wordpress, de-wordpress, wordpress-mu
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Unfixed XSS vulnerability at www.wdr5.de
Security researcher Hanno Boeck, has submitted on 21/11/2008 a cross-site-scripting XSS vulnerability affecting www.wdr5.de, which at the time of submission ranked 102752 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...
Linux Command Shell, Reverse TCP Inline
Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 183 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends inclu...
Linux Command Shell, Bind TCP Inline
Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 223 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends includ...
Linux Command Shell, Bind TCP Inline
Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 223 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends includ...
Linux Command Shell, Find Port Inline
Spawn a shell on an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 171 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends include...
Unfixed XSS vulnerability at www.antenne1.de
Security researcher Fabian Fingerle, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.antenne1.de, which at the time of submission ranked 290368 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...
Unfixed Redirect vulnerability at www.condadodecolle.com
Security researcher Langy, has submitted on 11/02/2008 a Redirect vulnerability affecting www.condadodecolle.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2008. It is currently unfixed. If y...
FreeBSD Ports: wordpress, de-wordpress, wordpress-mu
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...