Unfixed XSS vulnerability at www.carlajocarr.com

Security researcher Angle A.K.A malwarrior, has submitted on 16/11/2010 a cross-site-scripting XSS vulnerability affecting www.carlajocarr.com, which at the time of submission ranked 23723105 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

ASPilot Pilot Cart 7.3 SQL Injection

Title: ASPilot Pilot Cart 7.3 SQL Injection Date: 12.11.2010 Author: Daikin Software Link: http://www.pilotcart.com Version: 7.3 maybe also lower Vendor's Description of Software and demo: http://www.pilotcart.com Dork: Powered by Pilot Cart V.7.3 Application Info: Name: Pilot Cart version last 7...

Researchers Working Toward Processor-Specific Attacks

The last two decades have been a cake walk for malware authors. More than nine-tenths of the world’s computers run some variation of the same operating system – Microsoft’s Windows. A similarly sized super-majority use an array of applications from the same vendor: Microsoft Office, the Internet...

Unfixed XSS vulnerability at www.broadridge-ir.com

Security researcher Sony, has submitted on 11/10/2010 a cross-site-scripting XSS vulnerability affecting www.broadridge-ir.com, which at the time of submission ranked 1966661 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

MediaCentre V 4.0.52 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ========================================== MediaCentre V 4.0.52 DLL Hijacking Exploit ========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Unfixed XSS vulnerability at lhs.loria.fr

Security researcher AndMyXSS, has submitted on 19/10/2010 a cross-site-scripting XSS vulnerability affecting lhs.loria.fr, which at the time of submission ranked 249894 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...

acs-blog turkce v1.1.3-(tr) Database Disclosure Exploit

!/usr/bin/perl -w blog turkce v1.1.3-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

Unfixed XSS vulnerability at www.sacs.nsw.edu.au

Security researcher xyzjace, has submitted on 15/10/2010 a cross-site-scripting XSS vulnerability affecting www.sacs.nsw.edu.au, which at the time of submission ranked 12825 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at www.bblist.co.uk

Security researcher X3R0, has submitted on 15/10/2010 a cross-site-scripting XSS vulnerability affecting www.bblist.co.uk, which at the time of submission ranked 1335739 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currentl...

[SECURITY] [DSA 2120-1] New postgresql-8.3 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2120-1 [email protected] http://www.debian.org/security/ Florian Weimer October 12, 2010 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.bibliotheekmeierij.nl

Security researcher GTADarkDude, has submitted on 10/10/2010 a cross-site-scripting XSS vulnerability affecting www.bibliotheekmeierij.nl, which at the time of submission ranked 12271727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/201...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

Empire cms backstage to get a shell vulnerability and fix-vulnerability warning-the black bar safety net

The first method: add a custom page 6.0 on experiment success Template management - add custom page - page name casually--file name: xx. asp;. html--the page content--pony copy the contents into it Save the post and then the Admin page Click you can go see your horse, generally in the root...

OrbisCMS-1.0.2 Add Admin User CSRF

Exploit for php platform in category web applications ================================== OrbisCMS-1.0.2 CSRF Add Admin User ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

[SECURITY] [DSA-2106-2] New xulrunner packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2106-2 [email protected] http://www.debian.org/security/ Stefan Fritsch September 19, 2010 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.wintic.it

Security researcher sKoRe2o4, has submitted on 18/09/2010 a cross-site-scripting XSS vulnerability affecting www.wintic.it, which at the time of submission ranked 379855 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currentl...

CVE-2010-3412

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...

RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...

Unfixed XSS vulnerability at phome.net

Security researcher Wong Chieh Yie, has submitted on 09/11/2010 a cross-site-scripting XSS vulnerability affecting phome.net, which at the time of submission ranked 6559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed XSS vulnerability at www.seatdata.com

Security researcher surbo, has submitted on 09/09/2010 a cross-site-scripting XSS vulnerability affecting www.seatdata.com, which at the time of submission ranked 243573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currentl...