CVE-2009-4462

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10451 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33403 2026-06-19 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monuyvqjyp2n...

SAP NetWeaver DTR — Multiple XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Design Time Repository 6.4-7.2 Vendor URL: Bugs: XSS Exploits: YES Reported: 14.12.2009 Vendor response: 14.12.2009 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Alexander Polyakov and Alexey...

Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Piwigo 2.0.6 - Multiple Vulnerabilities

Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...

Chipmunk NewsLetter - Cross-Site Request Forgery

Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

Cisco Defines Cybercrime ROI

The Cisco Cybercrime Return on Investment Matrix identifies the innovative and lucrative banking Trojan Zeus, as well as successful Web exploits that have dominated cybercrime as “rising stars.” Read the full article. TechTarget...

CVE-2009-4571

creationtimestamp| type| source ---|---|--- 2009-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10324 2013-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24108...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...

CVE-2009-4231

creationtimestamp| type| source ---|---|--- 2009-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10246...

CVE-2009-4120

creationtimestamp| type| source ---|---|--- 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10224 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33375...

CVE-2009-3576

creationtimestamp| type| source ---|---|--- 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10211 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33273...

CVE-2009-4032

creationtimestamp| type| source ---|---|--- 2009-11-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33374 2009-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10234...

CVE-2009-3840

creationtimestamp| type| source ---|---|--- 2009-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10176 2009-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10377...

CVE-2009-4047

creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33355 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33354 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33356 2009-11-16...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

CuteNews 1.4.6 - result Cross-Site Scripting

CuteNews 1.4.6 - result Cross-Site Scripting source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note...