21 matches found
Malicious code in my-saeed-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d222a4cf76e8e0efb6de33ce203327546a24a125a7b6fa1e70bf04566d4d1dd The package my-saeed-lib was found to contain malicious code. Source: ghsa-malware c835d59a9317a70385922241ebb4aa8a34025c5cef3f3c22e03df1fc6f22042f A...
EUVD-2025-199364
Malicious code in my-saeed-lib npm...
WordPress MC Woocommerce Wishlist plugin <= 1.9.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin MC Woocommerce Wishlist versions = 1.9.1...
WordPress Sticky Popup plugin <= 1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Saeed Alzahrani in WordPress Sticky Popup plugin versions = 1.2. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure is temporary, pending a full...
Customer Support System 1.0 Cross Site Scripting
Exploit Title: Customer Support System 1.0 - "First Name" & "Last Name" Stored XSS Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-11 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...
NetPCLinker 1.0.0.0 - Buffer Overflow (SEH Egghunter)
Exploit Title: NetPCLinker 1.0.0.0 - Buffer Overflow SEH Egghunter Date: 2019-06-28 Exploit Author: Saeed reza Zamanian Vendor Homepage: https://sourceforge.net/projects/netpclinker/ Software Link: https://sourceforge.net/projects/netpclinker/files/ Version: 1.0.0.0 Tested on: Windows Vista SP1...
NetPCLinker 1.0.0.0 - Buffer Overflow (SEH Egghunter) Exploit
Exploit Title: NetPCLinker 1.0.0.0 - Buffer Overflow SEH Egghunter Exploit Author: Saeed reza Zamanian Vendor Homepage: https://sourceforge.net/projects/netpclinker/ Software Link: https://sourceforge.net/projects/netpclinker/files/ Version: 1.0.0.0 Tested on: Windows Vista SP1 !/usr/bin/python '...
NetPCLinker 1.0.0.0 Buffer Overflow
!/usr/bin/python Exploit Title: NetPCLinker 1.0.0.0 Buffer Overflow SEH Egghunter Date: 2019-06-28 Exploit Author: Saeed reza Zamanian Vendor Homepage: https://sourceforge.net/projects/netpclinker/ Software Link: https://sourceforge.net/projects/netpclinker/files/ Version: 1.0.0.0 Tested on:...
FBI Taps Apple to Unlock Pensacola Shooter's iPhone
The Federal Bureau of Investigation is once again asking Apple to help unlock the iPhone of a potential terrorist. The FBI is looking to crack two iPhones that they believe were owned by Mohammed Saeed Alshamrani, the Saudi-born suspect in the shooting attack that killed three people in December ...
Huawei B315s-22 - Information Leak
Product Family: LTE Model B315s – 22 Firmware version: 21.318.01.00.26 Author: Usman Saeed usman at xc0re.net 1. Unauthenticated access to sensitive files: It was observed that the web application running on the router, allows unauthenticated access to sensitive files on the web server. POC: By...
Kolibri+ Webserver 2 - (Get Request) Denial of Service Vulnerability
No description provided by source. Name : Kolibri+ Webserver 2 , Denial Of service / Crash Author : Usman Saeed Company : Xc0re Security Reasearch Group Date : 06/09/09 Homepage : http://www.xc0re.net Download Page : http://download.cnet.com/Kolibri-WebServer/3000-102484-10896378.html?tag=mncol...
iGuard Security Access Control System Cross Site Scripting
Tile ==== iGuard Security Access Control System Webserver, Cross Site Scripting XSS Author ====== Usman Saeed , Xc0re Security Research Group Website : http://www.xc0re.net Twitter : http://twitter.com/xc0resecurity Blog : http://www.xc0re.net/blog Published :...
Polipo 1.0.4.1 - POST/PUT HTTP Header Processing Denial of Service
source: https://www.securityfocus.com/bid/49908/info Polipo is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Polipo 1.0.4.1 is vulnerable; other versions may also be affected...
ZyXEL P-660R-T1 V2 Cross Site Scripting
Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...
Xitami 5.0 - '/AUX' Request Remote Denial of Service
source: https://www.securityfocus.com/bid/40027/info Xitami is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xitami 5.0a0 is vulnerable. !/usr/bin/perl Xitami/5.0a0 Denial Of Service Disclaimer:...
Xitami / 5.0a0 Denial Of Service
Exploit for windows platform in category dos / poc ================================ Xitami / 5.0a0 Denial Of Service ================================ Name : Xitami/5.0a0 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website:http://www.xc0re.net DATE: 10/05/10 Tested...
Cherokee web server 0.5.4 DoS
No description provided by source. Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Company: Xc0re Security Research Group Website: http://www.xc0re.net DATE: 25/10/09 Tested on Windows ! Disclaimer: This code is for Educational Purposes , I would Not be responsible for any...
Cherokee web server 0.5.4 DoS
Exploit for unknown platform in category web applications ============================= Cherokee web server 0.5.4 DoS ============================= Name : Cherokee Web Server 0.5.4 Denial Of Service Author: Usman Saeed Tested on Windows ! Disclaimer: This code is for Educational Purposes , I woul...
BRS Webweaver 1.33 - '/Scripts' Access Restriction Bypass
Name : BSR Webweaver Version 1.33 /Scripts access restriction bypass vulnerbility Author : Usman Saeed Company : Xc0re Security Reasearch Group Date : 15/09/09 Homepage : http://www.xc0re.net Download Page : http://www.brswebweaver.com/downloads.html Attack type : Remote Patch Status : Unpatched...
Kolibri+ Webserver 2 (GET Request) Remote SEH Overwrite Exploit
Exploit for unknown platform in category remote exploits =============================================================== Kolibri+ Webserver 2 GET Request Remote SEH Overwrite Exploit =============================================================== !/usr/bin/python Could not get this to work on XP...