EUVD-2026-10195

A security flaw has been discovered in RyuzakiShinji biome-mcp-server up to 1.0.0. Affected by this issue is some unknown functionality of the file biome-mcp-server.ts. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit has been released to t...

CVE-2026-3680

A security flaw has been discovered in RyuzakiShinji biome-mcp-server up to 1.0.0. Affected by this issue is some unknown functionality of the file biome-mcp-server.ts. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit has been released to t...

CVE-2026-3680 RyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection

A security flaw has been discovered in RyuzakiShinji biome-mcp-server up to 1.0.0. Affected by this issue is some unknown functionality of the file biome-mcp-server.ts. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit has been released to t...

City Directory Review And Rating Script SQL Injection

Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On: Ubuntu 12.10 - Win7...

Unfixed XSS vulnerability at www.europcarug.com

Security researcher Ryuzaki, has submitted on 10/04/2012 a cross-site-scripting XSS vulnerability affecting www.europcarug.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2012. It is currently...

IMCE Mkdir Shell Upload

Exploit Title: IMCE Mkdir == Remote File Upload Vulnerability Date: 27/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://drupal.org/project/imcemkdir Google dork: inurl:"/imce?dir=" intitle:"File Browser" Tested on:...

Yahoo Answer Wordpress Auto Poster Cross Site Scripting

Exploit Title: Yahoo Answer Wordpress Auto PosterPlugin "3 OR "alertdocument.cookie Dem0 : http://www.tryscripts.org/wordpress/yahoo/ FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D Hackers,...

Respuestas.gobiernousa.gov Cross Site Scripting

Exploit Title: Respuestas.gobiernousa.gov Cross Site Scripting Google Dork: - Date: 26/3/2012 3:15 AM Malaysia Author: Ryuzaki Lawlet Blog: http://justryuz.blogspot.com Tested on: Linux OSHIRIX CVE : XSS Vulnerable Vulnerable :...

Microsoft.com Cross Site Scripting

Exploit Title: Microsoft Cross Site Scripting Vulnerability Date: 08/03/2012 - 06:21pm Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP, Win 7 Platform: - Email: [email protected] $ Vulnerable : http://www.microsoft.com/en-us/together/possibilities.aspx?hdrFo=mthdr= ...

Stanford.edu Cross Site Scripting

Exploit Title: Stanford.edu Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP /Win7 Platform: php Email: [email protected] $ Vulnerable : http://www.domain.edu/Ryu/Ryuz/cgi-bin/index.php?photos&event= $...

Agentportal.westernunion.com Cross Site Scripting

Exploit Title: Agentportal.westernunion.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable :...

Tinderbox.mozilla.org Cross Site Scripting

Exploit Title: tinderbox.mozilla.org Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable : http://domains.domain.org/showbuilds.cgi?tree=SeaMonkey&hours= $...

IBM.com Cross Site Scripting

Exploit Title: ibm.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable : http://www-01.domain.com/path/pat/portal.page?loc=enUS $ Preview Sites:...

4shared.com Cross Site Scripting

Exploit Title: 4shared.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable :...

Whois.com Cross Site Scripting

Exploit Title: whois.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable : http://domains.domain.com/hosting.php?type= $ Preview Sites:...

Shockwave.com Cross Site Scripting

Exploit Title: shockwave.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable : http://www.domain.com/search.jsp?q= $ Preview Sites:...

Indonesian Supreme Court Cross Site Scripting

| Title : Indonesian Supreme Court Cross Site Scripting Mahkamah Agung Indonesia | Author : Ryuzaki Lawlet | Email : [email protected] | Date :18/10/2011 | Vuln Type: Reflected XSS | URL : http://www.mahkamahagung.go.id/ Exploit : http://www.mahkamahagung.go.id/webda/index.asp?wid=1128 Cyb3rSec...