Fixed XSS vulnerability at homer.med.ualberta.ca

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting homer.med.ualberta.ca, which at the time of submission ranked 6255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.truckworld.pl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.truckworld.pl, which at the time of submission ranked 2014416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at direct.formas.se

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting direct.formas.se, which at the time of submission ranked 2378829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.equipmenttrader.nl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.equipmenttrader.nl, which at the time of submission ranked 5125603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It...

Unfixed XSS vulnerability at www.trucks-de.eu

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.trucks-de.eu, which at the time of submission ranked 977389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

CVE-2007-1192 affects HyperBook Guestbook 1.30. The issue is improper access control: sensitive data is stored under the web root, enabling a remote attacker to directly download the admin password hash from data/gbconfiguration.dat. This constraint is evidenced across multiple sources in the con...

Unfixed XSS vulnerability at www.w-hotspots.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.papasotiriou.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.papasotiriou.gr, which at the time of submission ranked 50005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Buffer overflow

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.hnms.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hnms.gr, which at the time of submission ranked 68928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.vres.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.vres.gr, which at the time of submission ranked 32854 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

r3mote_win_UDPexec.pl.txt

!/usr/bin/perl -w use IO::Socket; Executes the command given as first argument as a child process of gwrd in Windows R/3 environments. Request packet may not contain space character 0x20. The command interpreter must obviously be modified for other UNIX environments. 2003, FX of Phenoelit $|=1;...