CVE-2010-3730

CVE-2010-3730 affects Google Chrome prior to 6.0.472.62. The vulnerability arises from improper handling of a document’s origin when managing properties, enabling a remote attacker to induce an unspecified impact via a crafted web site (the so‑called “property pollution”). Publicly documented det...

CVE-2010-3261

Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors...

Unfixed XSS vulnerability at www.telekomadsl.net

Security researcher MURATHOCA, has submitted on 09/07/2010 a cross-site-scripting XSS vulnerability affecting www.telekomadsl.net, which at the time of submission ranked 15619342 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at death.org

Security researcher Uber0n, has submitted on 09/04/2010 a cross-site-scripting XSS vulnerability affecting death.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is currently unfixed. ...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Unfixed XSS vulnerability at library.umd.umich.edu

Security researcher p0pc0rn, has submitted on 08/12/2010 a cross-site-scripting XSS vulnerability affecting library.umd.umich.edu, which at the time of submission ranked 3022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

Mandriva Update for php MDVSA-2010:139 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:139 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Unfixed XSS vulnerability at lookr.tv

Security researcher cbr, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting lookr.tv, which at the time of submission ranked 640118 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed...

ShopCartDx <= v4.30 (products.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ============================================================== ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @;...

Unfixed XSS vulnerability at www.mai-dga.ro

Security researcher blackboy1337, has submitted on 23/06/2010 a cross-site-scripting XSS vulnerability affecting www.mai-dga.ro, which at the time of submission ranked 2891954 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...

Classmate Script Shell Upload

Thanks To ALLahe 0uJda M0roco Lov3r InformatioN Title : ClassMate Script Remote file Upload Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or http://www.dz4all.com or www.Zoneturka.com Vendor : http://www.availscript.com/classmatescript.php Price : $35 Only! Email :...

Joomla Component com_jnewsletter SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comjnewsletter SQL Injection Vulnerability ============================================================...

Virtual Real Estate Manager 3.5 - SQL Injection

Virtual Real Estate Manager 3.5 - SQL Injection ====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor...

CVE-2010-1963

Cross-site scripting XSS vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Joomla BF Quiz SQL Injection Exploit

!/usr/bin/python Joomla Component BF Quiz SQL Injection Exploit by Valentin Hoebel [email protected] Version 1.0 29th May 2010 ASCII FOR BREAKFAST About the vulnerability: ---------------------------------------------------------------------------- Read more here:...

CVE-2010-1606

CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...

Cisco Router and Security Device Manager vulnerable to cross-site scripting

Overview Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability...