86 matches found
Electric Sheep Fencing pfsense cross-site scripting vulnerability (CNVD-2015-05672)
Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing pfsense, which can be exploited by remote attackers to inject arbitrary Web script or HTML...
Electric Sheep Fencing pfsense cross-site scripting vulnerability
Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing pfsense versions prior to 2.2.3, which stems from the systemauthservers.php script failing to...
Electric Sheep Fencing Pfsense 'zone' Parameter Cross-Site Scripting Vulnerability
Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing Pfsense that stems from the program's failure to adequately filter user-submitted input. When a us...
ESF pfSense status_captiveportal Cross Site Scripting (CVE-2015-2294)
A cross-site scripting vulnerability has been reported in Electric Sheep Fencing pfSense firewall. The vulnerability is due to insufficient validation of the zone variable in the statuscaptiveportal page. A remote attacker can exploit the XSS vulnerability to execute arbitrary scripts in the user...
Sheep Marketplace Owner Arrested While Trying to Buy Luxury Home
Thomas Jiřikovský, an alleged Owner of one of the most popular Darknet website ‘Sheep Marketplace,’ has been arrested after laundering around $40 Million, making it one of the biggest exit scams in Darknet history. After the arrest of Silk Road owner 'Ross Ulbricht' in 2013 -- Sheep Marketplace...
pfSense 2.2 - Multiple Vulnerabilities
Advisory ID: HTB23251 Product: pfSense Vendor: Electric Sheep Fencing LLC Vulnerable Versions: 2.2 and probably prior Tested Version: 2.2 Advisory Publication: March 4, 2015 without technical details Vendor Notification: March 4, 2015 Vendor Patch: March 5, 2015 Public Disclosure: March 25, 2015...
Mambo Remository Component <= 3.25 Remote Include Vulnerability
No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: o9.o8.2oo6 .. Affected Application: Remository v3.25 Mambo/Joomla CMS Component...
Gazelle CMS 1.0 - Multiple Vulnerabilities / RCE Exploit
No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...
Bitcoin Transaction Malleability Flaw Resolved
The so-called transaction malleability software issue blamed for the dissolution of Bitcoin exchange Mt. Gox has been patched. Also, the Bitcoin-QT reference client was also rebranded to Bitcoin Core, in order to clear confusion users might have had between the Bitcoin network and software. Bitco...
Silk Road alternative 'Sheep Marketplace' shut down after $40 Million in Bitcoin Theft
Sheep Marketplace, one of the leading anonymous websites, after Silk Road's closure by U.S. Prosecutors, allegedly selling drugs, has gone offline claiming it was robbed of $6 million worth of Bitcoins. Like Silk Road, Sheep Marketplace was a Deep Web site accessible via the Tor network and quick...
Silk Road alternative 'Sheep Marketplace' shut down after $40 Million in Bitcoin Theft
Sheep Marketplace, one of the leading anonymous websites, after Silk Road’s closure by U.S. Prosecutors, allegedly selling drugs, has gone offline claiming it was robbed of $6 million worth of Bitcoins. Like Silk Road, Sheep Marketplace was a Deep Web site accessible via the Tor network and quick...
WebEssence 1.0.2 Cross Site Scripting / SQL Injection
WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...
DocuWiki version 2009-12-25 suffers from directory traversal listing and modification vulnerabilitie
No description provided by source. Reported: 13-01-2010 Patched: 13-01-2010 Released: 14-01-2010 Vulnerable version : http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25.tgz Patched version: http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25b.tgz Author:...
Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit
No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...
Flatnux 2009-01-27 - Cross-Site Scripting Iframe Injection
Flatnux 2009-01-27 - Cross-Site Scripting Iframe Injection / - Flatnux-2009-01-27 XSS/Iframe injection p0c + 1 Create acount + 1 Go to http://localhost/flatnux/?mod=login&op=modprof&user=username - Set iframe in the Job fields Jobless l0l + 3 Now m4k3 frieNdship witch Sheep Greetings : cOndemned ...
Flatnux XSS / IFrame Injection
/ - Flatnux-2009-01-27 XSS/Iframe injection p0c + 1 Create acount + 1 Go to http://localhost/flatnux/?mod=login&op=modprof&user=username - Set iframe in the Job fields Jobless l0l + 3 Now m4k3 frieNdship witch Sheep Greetings : cOndemned , sid.psycho , wszyscy których ników nie umie wymówić :P an...
Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions
Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting thes...
Clansphere 2007.4 (cat_id) Remote SQL Injection Vulnerability
No description provided by source. Inclusion Hunter Team http://www.ihteam.net Clansphere 2007.4 Class: SQL Injection Found: 22/09/2007 Remote: Yes Site: http://www.clansphere.net/ Download: http://sourceforge.net/project/showfiles.php?groupid=95430 Author: R00TATI of IHTeam Contact:...
Mambo/Joomla Component Remository v3.25 (mosConfig_absolute_path) Remote File Inclusion Vulnerability
.: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | / / :. . ..: ||| / .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: o9.o8.2oo6 .. Affected Application: Remository v3.25 Mambo/Joomla CMS Component . . : contact :...
CVE-2005-4582
Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via 1 DNS spoofing, 2 a URL on the command line, or 3 a URL in the configuration file. NOTE: the same attack...