117 matches found
Blekko.com Cross Site Scripting
Date: 24.11.2011 Author: Sony Site: http://blekko.com My blog and PoC: http://st2tea.blogspot.com/2011/11/blekkocom-web-search-engine-cross-site.html What is blekko.com? You can read here: http://en.wikipedia.org/wiki/Blekko So..our xss in the profile website link...
Facebook Web Search Box May Be Dangerous
Facebook users be warned: If you see a second search box at the top of your personal page, don't use it. "We are not testing the placement of a separate Web search field and have no plans to do so," a Facebook representative told the blog Search Engine Land. An image of a Facebook page with two...
Wowd Search Client 1.3.0 XSS
No description provided by source. Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Advisore:http://lostmon.blogspot.com/2009/10/ wowd-search-client-multiple-variable.html Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time search engine for...
Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)
hi full-disclosure, Baidu Soba Remote Code Execute Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: Baidu Soba is a popular browser toolbar which developed by Baidu, a Chinese web search engine company, like Google, more informations can be found at:...
Verity Ultraseek < 5.7 Multiple Vulnerabilities
The remote host is running Ultraseek, an enterprise web search engine. According to the version in its banner, an unauthenticated, remote attacker reportedly can use '/highlight/index.html' script on the remote install of Ultraseek as a proxy to launch web attacks or even enumerate internal...
BlueShoes Framework <= 4.6 Remote File Include Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper...
AllWeb search SQL inj. vuln.
AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...
YaCy Peer-To-Peer Search Engine XSS
The remote host contains a peer-to-peer search engine that is prone to cross-site scripting attacks. Description : The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due ...
Baidu VS Google-who is more powerful-bug warning-the black bar safety net
Remember once used Baidu to find the asp back door in the process! google, well known, famous world-class web search engine, and today, they worship in our domestic Baidu's feet, what it??? Don't believe that?? Don't believe it tell I see it! This was thanks to the cat the cat provides much...
Moderate: Red Hat Security Advisory: htdig security update
Updated htdig packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ht://Dig system is a Web search and indexing system for a small domain or intranet. Michael Kr...
PhpInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion
Exploit for unknown platform in category web applications ================================================================ PhpInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion ================================================================ !/usr/bin/perl use LWP::Simple; use...
Buffer overflow in mnoGoSearch
Product : mnoGoSearch Date : 02/15/2004 Author : Frank Denis [email protected] ------------------------ Product description ------------------------ From the web site : mnoGoSearch formerly known as UdmSearch is a full-featured web search engine software for intranet and internet servers. mnoGoSearc...
CVE-2002-0530
Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter...
CVE-2002-0530
CVE-2002-0530 is a cross-site scripting vulnerability in Novell Web Search 2.0.1 that allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. The NVD entry lists a CVSS v2 base score of 5.1 (Network, High attack complexity, no authentication, Partia...
CVE-2002-0530
Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter...
CSS in DMOZGateway ( php-nuke )
New hole in an phpnuke addon. The concerned addon is DMOZGateway. He allows to search on the web via the dmoz.org site. The addon's url is th following one : /modules.php? op=modload&name=DMOZGateway&file=index The cross site scripting hole is : /modules.php?...
The ht://Dig Group ht://Dig 3.1.1/3.1.2/3.1.3/3.1.4/3.2 .0b1 - Arbitrary File Inclusion
source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the opening singlw quote character is taken as a path to a file for inclusion, for...