xn--nwq32oxvbcw2a6r4c.tw XSS vulnerability

Vulnerable URL: http://www.xn--nwq32oxvbcw2a6r4c.tw/newscon.php?lang=%22%3Etro%20lo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E=2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

absolventenkongress.de XSS vulnerability

Vulnerable URL: https://www.absolventenkongress.de/service/vergessen.html Details: Description| Value ---|--- Patched:| Yes, at 05.05.2017 Latest check for patch:| 05.05.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2427709 VIP website status:| No...

solarsystem.nasa.gov XSS vulnerability

Vulnerable URL: http://solarsystem.nasa.gov/rps/feedback.cfm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check solarsystem.nasa.gov SSL connection:| Grade: A...

Simple Machines Forum 1.1.3 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...

smf-sql.txt

!/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL Injection filter. I submitted a...

YABB information leakage on failed login

YABB is a popular web-based bulletin board system, written in perl and available from http://www.yabbforum.com/. While evaluating it, I found a minor issue where an attacker trying to log in to the forums can extract some useful information making his job easier than it needs to be. Most YABB...

Re: rh 6.2 - gid compromises, etc [+ MORE!!!]

Ya know the sad thing is I pointed out these problems in bugzilla posts the gkermit being sgid uucp I reported two+ weeks ago. No response. My description of the gkermit bug which I reported couple weeks ago can be found here: http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=11870 The slrn...