198 matches found
CastRipper 2.50.70 (.m3u) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================= CastRipper 2.50.70 .m3u Local Buffer Overflow Exploit ======================================================= !/usr/bin/perl...
Unfixed XSS vulnerability at www.website-hit-counters.com
Security researcher mckt, has submitted on 11/06/2008 a cross-site-scripting XSS vulnerability affecting www.website-hit-counters.com, which at the time of submission ranked 119005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2008. It ...
ICONICS Vessel / Gauge / Switch 8.02.140 ActiveX BOF Exploit (meta)
Exploit for unknown platform in category remote exploits =================================================================== ICONICS Vessel / Gauge / Switch 8.02.140 ActiveX BOF Exploit meta =================================================================== $Id: iconicsdlgwrapper.rb 1 2008-09-21...
Microsoft IIS WebHits ISAPI Filter Vulnerability (MS00-06) - Active Check
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Unfixed XSS vulnerability at hit-blog.com
Security researcher xylitol, has submitted on 26/08/2008 a cross-site-scripting XSS vulnerability affecting hit-blog.com, which at the time of submission ranked 1828945 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currently...
Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit
No description provided by source. NTLM BASIC AUTH BYPASS : sha0atbadchecksum.net Based on my adv: http://www.securityfocus.com/bid/24105/info CVE-2007-2815 if $ != 2 then printf "USAGE:\t\t$0 Site Protected Object\nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n";...
Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass
Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass !/bin/sh NTLM && BASIC AUTH BYPASS : sha0atbadchecksum.net Based on my adv: https://www.securityfocus.com/bid/24105/info CVE-2007-2815 if $ != 2 then printf "USAGE:\t\t$0 \nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n";...
Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit
Exploit for unknown platform in category remote exploits =================================================================== Microsoft IIS \nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n"; exit 0 fi site=$1 protectedObject=$2...
Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass
!/bin/sh NTLM && BASIC AUTH BYPASS : sha0atbadchecksum.net Based on my adv: https://www.securityfocus.com/bid/24105/info CVE-2007-2815 if $ != 2 then printf "USAGE:\t\t$0 \nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n"; exit 0 fi site=$1 protectedObject=$2...
Microsoft Internet Information Server点击高亮验证绕过漏洞
Microsoft Internet Information Services IIS是一款功能强大的WEB服务程序。 Microsoft IIS由于对'Hit-highlighting'实现存在问题，远程攻击者可以利用漏洞绕过部分验证访问私有文件，获得敏感信息。 由于对"Hit-highlighting"功能实现存在问题，通过使用"Hit-highlighting"高亮，任何Internet用户可以访问私有WEB目录和任意IISv5 WEB文件。 1. 在 IIS 5.0 Service Pack 2 SP 2, 创建网站根目录 （例如, C:\Inetpub\WWWRoot） 中命名...
CVE-2007-2815
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services IIS Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile...
Unfixed XSS vulnerability at easy-hit-counters.com
Security researcher St@rExT, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting easy-hit-counters.com, which at the time of submission ranked 165067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...
Unfixed XSS vulnerability at hit-fr.net
Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting hit-fr.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...
ms07-004.txt
and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
Hacking basics series of on the web Trojan review-vulnerability warning-the black bar safety net
A total T Web Trojans has been the domestic network of popular things. The state notes that according to friends, this kind of thing in a foreign country is not popular.） The reason the more popular of the Golden State think of the following reasons: 1. Web Trojans in a variety of network threats...
Дырки в Microsoft IndexServer (buffer overflow, file disclosure)
Переполнение буфера и новая разновидность Hit Highliting...
Microsoft Index Server 2.0 Indexing Service (Windows 2000) - Directory Traversal
Microsoft Index Server 2.0 Indexing Service Windows 2000 - Directory Traversal // source: https://www.securityfocus.com/bid/950/info Index Server 2.0 is a utility included in the NT 4.0 Option Pack. The functionality provided by Index Service has been built into Windows 2000 as Indexing Services...
Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal
// source: https://www.securityfocus.com/bid/950/info Index Server 2.0 is a utility included in the NT 4.0 Option Pack. The functionality provided by Index Service has been built into Windows 2000 as Indexing Services. When combined with IIS, Index Server and Indexing Services include the ability...