Pale Moon Web Browser 11.0 Denial Of Service

Pale Moon Multi Looping By eidelweiss function eidelweiss window.onerror=new Function"history.go0"; window.print; eidelweiss; eidelweiss;...

Red Moon Media CMS SQL Injection

Exploit Title : redmoonmedia Cms Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.redmoonmedia.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Insecure secure cookie in Tornado

BLUE MOON SECURITY ADVISORY 2010-01 =================================== :Title: Insecure secure cookie in Tornado :Severity: Low :Reporter: Blue Moon Consulting :Products: Tornado v1.0 :Fixed in: Tornado v1.0.1 Description ----------- Tornado is an open source version of the scalable, non-blockin...

[BMSA-2009-08] Multiple Vulnerabilities in PyForum

BLUE MOON SECURITY ADVISORY 2009-08 =================================== :Title: Multiple Vulnerabilities in PyForum :Severity: Critical :Reporter: Hoang Quoc Thinh and Blue Moon Consulting :Products: PyForum v1.0.3 :Fixed in: -- Description ----------- PyForum is a 100 python-based message board...

Blue Moon Security Advisory 2009-04

BLUE MOON SECURITY ADVISORY 2009-04 =================================== :Title: Remote Denial of Service in Internet Explorer :Severity: Moderate :Reporter: Blue Moon Consulting :Products: Internet Explorer 7 and 8 :Fixed in: -- Description ----------- We could not find out the definitive...

Unfixed XSS vulnerability at www.dvd-moon.com

Security researcher Woo, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.dvd-moon.com, which at the time of submission ranked 4043254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is currently...

[BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1

BLUE MOON SECURITY ADVISORY 2009-03 =================================== :Title: Multiple vulnerabilities in OpenSite v2.1 :Severity: Critical :Reporter: Blue Moon Consulting :Products: OpenSite v2.1 :Fixed in: to be fixed in 3.0 Description ----------- OpenSite is an Open Source Content Managemen...

[BMSA-2009-02] XML injection in PyBlosxom

BLUE MOON SECURITY ADVISORY 2009-02 =================================== :Title: XML Injection in PyBlosxom :Severity: Low :Reporter: Blue Moon Consulting :Products: PyBlosxom v1.4.3 :Fixed in: -- Description ----------- PyBlosxom is a lightweight file-based weblog system. The project started as a...

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac in...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

Exploit for unknown platform in category dos / poc ================================================================ Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities ================================================================ BLUE MOON SECURITY ADVISORY 2008-09...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Phorum admin.php3无需验证修改管理员口令漏洞

BUGTRAQ: 2271 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个问题，远程攻击者可以访问本地系统文件。 admin.php3脚本用于安全和管理被创建的论坛。它带有口令保护，但存在漏洞可以无需访问权限修改管理员口令。一旦拥有了管理功能的访问权限，就可以进入 Master Setting 功能，在 default .langfile name 输入框输入想要访问的系统本地文件，重新载入admin.php3页面后就可以浏览这个文件的内容了。 3.0.7 and...

[BMSA 2008-07] Format string vulnerability in 5th stree

BLUE MOON SECURITY ADVISORY 2008-07 =================================== :Title: Format string vulnerability in 5th street Hot Step, High Street 5 :Severity: Critical :Reporter: Blue Moon Consulting, superkhung :Products: 5th street and derived clients :Fixed in: -- Description ----------- 5th...