Unfixed XSS vulnerability at mailaw.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mailaw.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.maxsoft.ir

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maxsoft.ir, which at the time of submission ranked 3699424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

CVE-2007-3010: Improper Neutralization of Special Elements used in a Command

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Unfixed XSS vulnerability at expert.edu.br

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting expert.edu.br, which at the time of submission ranked 3539548 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currently...

PT-2007-4307

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX Enterprise Communication Server versions prior to R7.1 Description The masterCGI component within the Unified Maintenance Tool contains a flaw that allows remote attackers to execute arbitrary commands. This occurs when shell...

Unfixed XSS vulnerability at www.6olab.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.6olab.com, which at the time of submission ranked 215654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

Unfixed XSS vulnerability at mail.diabetes-kids.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting mail.diabetes-kids.de, which at the time of submission ranked 1869789 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.flinkymail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.flinkymail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.chatffm.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.chatffm.de, which at the time of submission ranked 958647 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2007. It is currently...

Unfixed XSS vulnerability at darksidecommunity.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting darksidecommunity.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currentl...

Unfixed XSS vulnerability at www.doctormd.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.doctormd.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

Unfixed XSS vulnerability at www.maildome.com

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maildome.com, which at the time of submission ranked 524733 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at www.webx.tv

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.webx.tv, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.evros.gr

Security researcher T-Ping, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.evros.gr, which at the time of submission ranked 570499 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is currently...

Unfixed XSS vulnerability at ru6.cti.gr

Security researcher T-Ping, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting ru6.cti.gr, which at the time of submission ranked 229387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution

This module abuses a metacharacter injection vulnerability in the HTTP management interface of the Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 and earlier. The Unified Maintenance Tool contains a 'masterCGI' binary which allows an unauthenticated attacker to execute arbitrary...

CVE-2004-2685: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping p command to the Telnet proxy service, a different vector than CVE-2004-2416...

CCProxy 6.2 - Telnet Proxy Ping Overflow (Metasploit)

CCProxy 6.2 - Telnet Proxy Ping Overflow Metasploit $Id: ccproxytelnetping.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

CCProxy <= v6.2 Telnet Proxy Ping Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ========================================================= CCProxy 'CCProxy %q This module exploits the YoungZSoft CCProxy 'Patrick Webster ' , 'Arch' = ARCHX86 , 'License' = MSFLICENSE, 'Version' = '$Revision$', 'References' = 'BID', '11666...

CVE-2007-4411

ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...