122 matches found
eBay.com ocsnext CSS Injection
Exploit Title: eBay.com ocsnext sub-domain Reflected CSS injection Date: 20/12/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.ebay.com Version: / Category: Reflected CSS injection Google dork: Tested on: eBay.com ocsnext sub-domain Adobe description :...
Orion Browser Dumper v1.0 released
Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...
Browser Forensic Tool v2.0 - Advanced browser history search engine
Browser Forensic Tool v2.0 - Advanced browser history search engine Browser Forensic Tool v2.0 , Developed by DarkCoderSc Jean-Pierre LESUEUR ,is an advanced local browser history search engine, in less than few seconds it will extract the chosen keywords of most famous web browser, actually...
Syrian Malware and Darkcomet RAT : They can't blame the Developers
Syrian Malware and Darkcomet RAT : They can't blame the Developers Two days before we reported about The Syrian Malware - programs used to target the Syrian opposition. According to Report, They steal the identities of opposition activists, then impersonate them in online chats, then they gain th...
Spring Source OXM Remote OS Command Injection when XStream and IBM JRE are used
Reference: http://static.springsource.org/spring/docs/3.0.x/spring-framework-reference/html/oxm.htmld0e26722 Product: Spring Source OXM Object/XML Mapping Vendor: VMware Vulnerable Version: 3.0.4 only when XStream and IBM JRE are used Status: Fixed Vendor Notification: 12 October 2010 Vendor Fix:...
Spring Source OXM 3.0.4 Command Injection
Reference: http://static.springsource.org/spring/docs/3.0.x/spring-framework-reference/html/oxm.htmld0e26722 Product: Spring Source OXM Object/XML Mapping Vendor: VMware Vulnerable Version: 3.0.4 only when XStream and IBM JRE are used Status: Fixed Vendor Notification: 12 October 2010 Vendor Fix:...
Moderate: Red Hat Security Advisory: pidgin security update
Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
OpenDcHub 0.8.1 Remote Code Execution Exploit
!/usr/bin/python OpenDcHub 0.8.1 Remote Code Execution Exploit Pierre Nogues - http://www.indahax.com Description: OpenDcHub is a direct connect hub for Linux OpenDcHub doesn't handle specially crafted MyINFO message which lead to a stack overflow. Affected versions : OpenDcHub 0.8.1 Plateforms :...
Pidgin MSN <= 2.5.8 Remote Code Execution Exploit
Exploit for windows platform in category remote exploits ================================================= Pidgin MSN = 2.5.8 Remote Code Execution Exploit ================================================= / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues Description: Pidgin is a...
Unfixed XSS vulnerability at www.synonymes.com
Security researcher Pierre Cholhot, has submitted on 14/06/2009 a cross-site-scripting XSS vulnerability affecting www.synonymes.com, which at the time of submission ranked 12424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...
Unfixed XSS vulnerability at www.123people.fr
Security researcher Pierre Gardenat, has submitted on 29/04/2009 a cross-site-scripting XSS vulnerability affecting www.123people.fr, which at the time of submission ranked 8793 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...
Unfixed XSS vulnerability at www.123people.com
Security researcher Pierre Gardenat, has submitted on 29/04/2009 a cross-site-scripting XSS vulnerability affecting www.123people.com, which at the time of submission ranked 1599 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...
CVE-2006-5678
PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...
CVE-2006-5678
CVE-2006-5678 describes a PHP remote file inclusion in common/visiteurs/include/library.inc.php used by J-Pierre DEZELUS Les Visiteurs 2.0.1 (and phpMyConferences 8.0.2). The vulnerability would allow arbitrary PHP code execution via a URL in the lvc_modules_dir parameter. NOTE: CVE states that t...
CVE-2006-5310
PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...
CVE-2006-5310
CVE-2006-5310 is a PHP remote file inclusion vulnerability in the phpMyConferences/Less Visiteurs stack. The flaw exists in common/visiteurs/include/menus.inc.php used by J-Pierre Dezel... Les Visiteurs 2.0.1 and, in turn, by phpMyConferences 8.0.2 (and possibly other products). An attacker can s...
cahierSQL.txt
Cahier de textes Pierre Lemaitre - St Lô France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit http://localhost/PATH/lire.php?classeID=1&matiereID=SQL or http://localhost/PATH/lireafaire.php?classeID=SQL expemle of sql code to get admin user and password...
Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...
Cahier de textes 2.0 Remote SQL injection Exploit
Cahier de textes Pierre Lemaitre - St Lф France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit http://localhost/PATH/lire.php?classeID=1&matiereID=SQL or http://localhost/PATH/lireafaire.php?classeID=SQL expemle of sql code to get admin user and password...
Cahier de texte 2.0 - 'lire.php' SQL Injection
Cahier de textes Pierre Lemaitre - St Lô France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit Coded by simo64 all thanks to simo64,drackanz,hardose,r00t !/usr/bin/perl use IO::Socket ; &header; &usage unlessdefined$ARGV0 && $ARGV1; $host = $ARGV0; $path =...