Unfixed XSS vulnerability at www.proxy2.de

Security researcher k3vin mitnick, has submitted on 19/03/2010 a cross-site-scripting XSS vulnerability affecting www.proxy2.de, which at the time of submission ranked 122759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Linux Kernel 2.6.18 - move_pages() Information Leak

Linux Kernel 2.6.18 - movepages Information Leak / sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzing, and on Sept 24th I was sent a POC...

Linux Kernel 2.6.18 - 'move_pages()' Information Leak

/ sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzing, and on Sept 24th I was sent a POC DoS for the bug but had forgotten about it until...

Winamp v5.572 whatsnew.txt Local Buffer Overflow Exploit

No description provided by source. Tested on: WinXP SP3 De !/usr/bin/perl Still learning, having some fun... Greetz to -Sid- Roadkill Jess Dawn Linki Special greetz do Debug, even i dont know you. Nice find man. Exploit has something around 70% chance of success. print "\n\n"; print " Winamp 5.57...

Egreetings 1.0b - Remote Database Disclosure

======================================================================== ====== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ======================================================================== ====== » Note : Tribute to the martyrs...

PNG Counter 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

CVE-2009-4474: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Mike de Boer zoom comzoom component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System

Advisory ID Internal CORE-2009-1013 1. Advisory Information Advisory Id: CORE-2009-1013 Advisory URL:http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities Date published: 2009-12-09 Date of last update: 2009-12-09 Vendors contacted: TestLink Community Release mode:...

FreeBSD Ports: wordpress

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla 1.5.12 Remote Code Execution via TinyMCE File Upload Vulnerability

No description provided by source. ?php / Joomla 1.5.12 Remote Code Execution via TinyMCE upload vulnerability Tested against : - Joomla 1.5.12 / Ubuntu 8.10 / Apache 2.2.9 - Joomla 1.5.12 / Windows XP SP2 / Apache 2.2.12 Luca "daath" De Fulgentis - daath at nibblesec.org http://blog.nibblesec.or...

Alleycode HTML Editor 2.2.1 BoF

Exploit for unknown platform in category local exploits =============================== Alleycode HTML Editor 2.2.1 BoF =============================== Title: Alleycode HTML Editor 2.2.1 BoF CVE-ID: OSVDB-ID: Author: DrIDE Published: 2009-10-29 Verified: yes view source print? !/usr/bin/env pytho...

Alleycode HTML Editor 2.2.1 BoF

No description provided by source. !/usr/bin/env python Alleycode HTML Editor 2.21 Local .HTML Overflow Exploit SEH Coded By: DrIDE Found By: Rafael de Sousa Tested On: XPSP0 SP3 doesn't have any usable P/P/R Download: www.alleycode.com calc.exe - 303 bytes Encoder - alpha/upper EXITFUNC - SEH sc...

Alleycode HTML Editor 2.21 Overflow

!/usr/bin/env python Alleycode HTML Editor 2.21 Local .HTML Overflow Exploit SEH Coded By: DrIDE Found By: Rafael de Sousa Tested On: XPSP0 SP3 doesn't have any usable P/P/R Download: www.alleycode.com calc.exe - 303 bytes Encoder - alpha/upper EXITFUNC - SEH sc =...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 6301)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Unfixed XSS vulnerability at downloads.k0k0.de

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting downloads.k0k0.de, which at the time of submission ranked 637705 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currentl...

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference

Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap...

Mambo Component com_zoom (catid) Blind SQL Injection Vulnerability

No description provided by source. Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i...

Mambo Zoom Blind SQL Injection

Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0 ------------------------------------------------------------------- SQLi :...

Mambo Component com_zoom (catid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mambo Component comzoom catid Blind SQL Injection Vulnerability ================================================================== Mambo component comzoom catid Blind SQL...

Mambo Component com_zoom - catid Blind SQL Injection

Mambo Component comzoom - catid Blind SQL Injection Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0/vers...