Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

Unfixed XSS vulnerability at www.addictech.com

Security researcher jjbutler88, has submitted on 27/05/2009 a cross-site-scripting XSS vulnerability affecting www.addictech.com, which at the time of submission ranked 631768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at archiv.bundestag.t-bn.de

Security researcher cAs, has submitted on 27/05/2009 a cross-site-scripting XSS vulnerability affecting archiv.bundestag.t-bn.de, which at the time of submission ranked 366199 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

COWON America jetCast 2.0.4.1109 (.mp3) Local Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== COWON America jetCast 2.0.4.1109 .mp3 Local Overflow Exploit ============================================================== ?php / COWON America jetCast 2.0.4.1109 .mp3 local hea...

Unfixed XSS vulnerability at egitimofis.com

Security researcher CCC, has submitted on 18/04/2009 a cross-site-scripting XSS vulnerability affecting egitimofis.com, which at the time of submission ranked 482979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently...

[SECURITY] [DSA 1754-1] New roundup packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1754-1 [email protected] http://www.debian.org/security/ Florian Weimer April 09, 2009 http://www.debian.org/security/faq -...

Mandriva Update for x11-driver-video MDVA-2008:048 (x11-driver-video)

Check for the Version of x11-driver-video OpenVAS Vulnerability Test Mandriva Update for x11-driver-video MDVA-2008:048 x11-driver-video Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for x11-driver-video MDVA-2008:048 (x11-driver-video)

Check for the Version of x11-driver-video OpenVAS Vulnerability Test Mandriva Update for x11-driver-video MDVA-2008:048 x11-driver-video Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

RedHat Update for vsftpd RHSA-2008:0295-01

Check for the Version of vsftpd OpenVAS Vulnerability Test RedHat Update for vsftpd RHSA-2008:0295-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.bla.com.au

Security researcher thejanky, has submitted on 28/02/2009 a cross-site-scripting XSS vulnerability affecting www.bla.com.au, which at the time of submission ranked 945382 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is current...

linux/x86 file reader 65 bytes + pathname

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 file reader 65 bytes + pathname ========================================= / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xo...

[SECURITY] [DSA 1712-1] New rt2400 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1712-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.grupmassoler.com

Security researcher hades, has submitted on 22/01/2009 a cross-site-scripting XSS vulnerability affecting www.grupmassoler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is currently...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Unfixed XSS vulnerability at www.vads.ac.uk

Security researcher ResisTance, has submitted on 17/01/2009 a cross-site-scripting XSS vulnerability affecting www.vads.ac.uk, which at the time of submission ranked 3210965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/01/2009. It is...

Unfixed XSS vulnerability at www.unlockingtheworld.com

Security researcher Rj-DevarA, has submitted on 01/01/2009 a cross-site-scripting XSS vulnerability affecting www.unlockingtheworld.com, which at the time of submission ranked 5954093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. ...

Unfixed XSS vulnerability at dealspl.us

Security researcher Azat Harutyunyan, has submitted on 12/06/2008 a cross-site-scripting XSS vulnerability affecting dealspl.us, which at the time of submission ranked 8240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...