Unfixed XSS vulnerability at www.firmaekle.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.firmaekle.com, which at the time of submission ranked 2292456 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at roundrockchamber.org

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting roundrockchamber.org, which at the time of submission ranked 2714412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

MOAB-25-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...

Apple Mac OSX 10.4.8 - 'UserNotificationCenter' Local Privilege Escalation

!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. "Exploit" for MOAB-22-01-2007: All your crash are belong to us. require 'fileutils' bugselected = ARGV0 || 0.toi INPUTMANAGERURL = "http://projects.info-pull.com/moab/bug-files/MOAB-22-01-2007im.tar.gz" keeping a...

DEBIAN-CVE-2007-0262

WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...

mcore-mdb.txt

M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...

Information disclosure

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb...

CVE-2007-0156

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb...

CVE-2007-0156

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb...

CVE-2007-0156

The CVE-2007-0156 entry concerns M-Core where the application stores its database under the web document root, enabling information disclosure if an attacker directly requests db/uyelik.mdb. Affected component: the database file accessed via the web root; root cause: improper placement of the dat...

M-Core Remote Password Disclosure Vulnerability

M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

Microsoft Windows - 'NetpManageIPCConnect' Remote Stack Overflow (MS06-070)

!/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure samba as DC Requires python and impacket Winny M Thomas ;- from impacket.dcerpc...

USN-376-1: imlib2 vulnerabilities

M. Joonas Pihlaja discovered that imlib2 did not sufficiently verify the validity of ARGB, JPG, LBM, PNG, PNM, TGA, and TIFF images. If a user were tricked into viewing or processing a specially crafted image with an application that uses imlib2, the flaws could be exploited to execute arbitrary...

CVE-2006-5019

Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /search with an invalid client parameter, which reveals the path in an error message...

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure source: https://www.securityfocus.com/bid/20149/info The Google Mini Search Appliance is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to reveal the location of a directory contained ...

CVE-2006-4711

Multiple cross-site scripting XSS vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...