e1.ru XSS vulnerability

Open Bug Bounty ID: OBB-55475 Description| Value ---|--- Affected Website:| e1.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

JetAudio 8.1.3 - '.mp4' Crash (PoC)

Exploit Title : jetAudio 8.1.3 Basic Use-after-free Corrupted mp4 Crash POC Product : jetAudio Basic Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.jetaudio.com/download/ Vulnerable version : 8.1.3 Latest at the moment an...

tennisportal.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-49779 Description| Value ---|--- Affected Website:| tennisportal.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Voila CMS Cross Site Scripting

Exploit Title:Voila Cms Xss Vulnerability. Exploit Author:Darksnipper & Dr.v!ru$ Home:www.cybercoders.org Email:[email protected] Cms Link:http://www.voilasyria.com Tested On : windows 7 & linux. Dork:intext:powerd by voila P.o.c open http://site.com/path/view/search/viewSearch.php put in sear...

Kelihos Update Includes New TLD and USB Infection Capabilities

There’s a little Michael Myers in the Kelihos botnet; maim it, kill it and it keeps on coming back to wreak more havoc. The 2011 takedown of the Kelihos botnet was one of Microsoft’s high-profile success stories against spambots and the like, yet Kelihos was back for more at the start of 2012 usi...

Elections 2012 and DDoS attacks in Russia

Vitaly Kamluk As Eugene Kaspersky had written earlier, we were expecting new DDoS attacks on resources covering the Russian presidential election. So, as the country went to the polls on 4 March, we were on the lookout for new DDoS attacks. We were surprised to hear a news report from one mass...

One million pages infected by Lilupophilupop SQL injection

One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...

Unfixed Redirect vulnerability at www.penta-91.ru

Security researcher p0pc0rn, has submitted on 24/12/2011 a Redirect vulnerability affecting www.penta-91.ru, which at the time of submission ranked 1526906 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If...

CVE-2011-3709

b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by locales/ruRU/ru-RU.locale.php and certain other files...

Unfixed XSS vulnerability at ibe.s7.ru

Security researcher trv, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting ibe.s7.ru, which at the time of submission ranked 17935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed...

6 Websites hacked By Om3ga

6 Websites hacked By Om3ga Sites : https://www.tlxdgs.com/ Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes. Shellcode exploit for windows platform 68 9D 61 F9 77 push 0x77C01345 B8 C7 93 C1 77 mov eax,msvcrt.system FF D0 call eax In msvcrt.dll at 0x77C01344 We have string ".cmd", that's the trick. Code will work in WinXP SP3 Pro Rus, in other...

Ru-board SQL Injection

============================= Ru-board Sql inj3ct0r Exploit ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type...

Unfixed XSS vulnerability at ru-biz.com

Security researcher austinator, has submitted on 08/03/2009 a cross-site-scripting XSS vulnerability affecting ru-biz.com, which at the time of submission ranked 10436220 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is current...

AShop ru.1.Beta Database Config Disclosure

Application Name : AShop ru.1.Beta Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : Admin Login Password Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/AShop.rar.html - http://softsearch.ru/programs/30-132-ashop-ru-download.shtml EXPLOIT :...

Unfixed XSS vulnerability at esetnod32.ru

Security researcher CruelChild, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting esetnod32.ru, which at the time of submission ranked 19340 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currentl...

Unfixed XSS vulnerability at musicmp3.ru

Security researcher Dr.Hack3r, has submitted on 11/05/2008 a cross-site-scripting XSS vulnerability affecting musicmp3.ru, which at the time of submission ranked 9718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is currently...

Agares ThemeSiteScript 1.0 (loadadminpage) RFI Vulnerability

No description provided by source. Author : DaRkLiFe Greetz : str0ke & S.W.A.T. & funkys0ul & Team 1nF3Ct3d Script : ThemeSiteScript v1.0 Remote File Inclusion Vulnerability Home Page : http://agaresmedia.com Download : http://rapidshare.com/files/72501220/ThemeSiteScript1.0webgraf.ru.rar Exploit...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. VID 2701611f-df5c-11d9-b875-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. VID 09db2844-0b21-11da-bc08-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...