OS X Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 65 include Msf::Payload::Single include Msf::Payload::Osx include...

Unfixed XSS vulnerability at www.formel1.de

Security researcher TotalSchaden, has submitted on 15/04/2007 a cross-site-scripting XSS vulnerability affecting www.formel1.de, which at the time of submission ranked 93030 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/04/2007. It is...

Unfixed XSS vulnerability at animaux-de-compagnie.bb-fr.com

Security researcher Airrox, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting animaux-de-compagnie.bb-fr.com, which at the time of submission ranked 9566 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. I...

Unfixed XSS vulnerability at www.wondernet24.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.wondernet24.de, which at the time of submission ranked 7446142 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.eventcenterb51.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.eventcenterb51.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.iplus3.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.iplus3.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...

Unfixed XSS vulnerability at www.webshop-247.de

Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.webshop-247.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It ...

Unfixed XSS vulnerability at www.root1.de

Security researcher KaBuS, has submitted on 04/03/2007 a cross-site-scripting XSS vulnerability affecting www.root1.de, which at the time of submission ranked 2977259 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is currently...

Design/Logic Flaw

Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

CVE-2007-1781

Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

CVE-2007-1781

Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

CVE-2007-1781

CVE-2007-1781 affects Minna De Office 1.x and 2.x, where user access restrictions are not properly enforced for certain privileged actions. A local user can potentially change configurations or cause other unspecified impacts due to inadequate privilege separation. The vulnerability is described ...

JVN#73258608 CruiseWorks and Minna De Office vulnerable in access restrictions

Impact An user with a standard privilege who logs into CruiseWorks or Minna De Office could possibly change the system configurations or information registered. Solution Products Affected CruiseWorks 1.09e and earlier Minna De Office version 1.xx and 2.xx For more information, refer to the vendor...

PHP array_user_key_compare() function memory corruption

Reference are left to freed buffer. It may lead to de-allocated memory space usage...

CVE-2006-7006

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...

CVE-2006-7006

CVE-2006-7006 concerns Robin de Graff Somery 0.4.4, where a PHP remote file inclusion through upload/admin/team.php could allow arbitrary PHP execution via a URL in the checkauth parameter. Red Hat/NVD entries reiterate the description but also include a note that CVE disputes this vulnerability ...

CVE-2006-7006

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...

PT-2007-1285 · Robin De Graff · Robin De Graff Somery

Name of the Vulnerable Software and Affected Versions: Robin de Graff Somery version 0.4.4 Description: A remote file inclusion issue in upload/admin/team.php allows remote attackers to potentially execute arbitrary PHP code via a URL in the checkauth parameter. However, it's noted that the...

Unfixed XSS vulnerability at game1059.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1059.de, which at the time of submission ranked 208302 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

Unfixed XSS vulnerability at game1046.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1046.de, which at the time of submission ranked 318132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...