Information Disclosure Vulnerability in Arctic Fox CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Arctic Fox CMS which could be exploited to disclose potentially sensitive information. 1 Information disclosure vulnerability in Arctic Fox CMS The vulnerability exists due to insufficient handling of error messages in th...

DotNetNuke Remote Code Execution vulnerability

======================================= Vulnerability discovered: November 23, 2010 Discovered by: Danil Niggebrugge, Fox-IT BV https://www.fox-it.com/ Reported to vendor: November 30, 2010 Fix available: Yes ======================================= PRODUCT ------------- DotNetNuke is an open sour...

Dawaween V 1.03 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Dawaween V 1.03 SQL Injection Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Fox Audio Player 0.8.0 Denial Of Service

Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Leandro Nini Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Fox-Audio-Player.shtml Tested On: Windows XP Sp3 32-bit / Windows 7 Ultimate 32-bit !/usr/bin/pe...

Fox Audio Player 0.8.0 .m3u Denial of Service

Exploit for windows platform in category dos / poc ============================================= Fox Audio Player 0.8.0 .m3u Denial of Service ============================================= Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar...

Fox Audio Player 0.8.0 - .m3u Denial of Service

Fox Audio Player 0.8.0 - .m3u Denial of Service Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Leandro Nini Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Fox-Audio-Player.shtml Tested On: Windows XP Sp3...

Fox Audio Player 0.8.0 - '.m3u' Denial of Service

Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar Developer: Leandro Nini Software Link: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Fox-Audio-Player.shtml Tested On: Windows XP Sp3 32-bit / Windows 7 Ultimate 32-bit !/usr/bin/pe...

Seagull 0.6.7 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Seagull 0.6.7 Remote File Inclusion Vulnerability ================================================= Exploit Title : seagull-0.6.7 ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr...

CF Image Hosting Script 1.3.8 Remote File Inclusion

================================= CF Image Hosting Script ===remote file inclode ================================= CF Image Hosting Script ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr Contact : [email protected] SiTe : www.sec4ever.com Download:...

Seagull 0.6.7 Remote File Inclusion

================================= seagull-0.6.7 ===remote file inclode ================================= Exploit Title : seagull-0.6.7 ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr Contact : [email protected] SiTe : www.sec4ever.com Download: http://seagullproject.org/ Version:6.7...

CF Image Hosting Script 1.3.8 - Remote File Inclusion

CF Image Hosting Script 1.3.8 - Remote File Inclusion ================================= CF Image Hosting Script ===remote file inclode ================================= CF Image Hosting Script ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr Contact : [email protected] SiTe :...

Unfixed XSS vulnerability at www.terzo.ca

Security researcher Persian Fox, has submitted on 10/10/2008 a cross-site-scripting XSS vulnerability affecting www.terzo.ca, which at the time of submission ranked 16823625 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Unfixed XSS vulnerability at www.water.ca

Security researcher Persian Fox, has submitted on 09/10/2008 a cross-site-scripting XSS vulnerability affecting www.water.ca, which at the time of submission ranked 4060049 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.farhangschool.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.farhangschool.ir, which at the time of submission ranked 1010017 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at www.iran20.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.iran20.ir, which at the time of submission ranked 114636 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is current...

Unfixed XSS vulnerability at www.nkh-road.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.nkh-road.ir, which at the time of submission ranked 7840960 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at www.yjcphotos.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.yjcphotos.ir, which at the time of submission ranked 418897 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at karafarini.sharif.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting karafarini.sharif.ir, which at the time of submission ranked 33713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at www.atiye.ir

Security researcher Black Fox, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.atiye.ir, which at the time of submission ranked 692105 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currentl...

Unfixed XSS vulnerability at www.netlinkweb.com

Security researcher Persian Fox, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.netlinkweb.com, which at the time of submission ranked 1613507 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/02/2008. It is...