Unfixed XSS vulnerability at www.library.yorku.ca

Security researcher Cir0, has submitted on 24/11/2010 a cross-site-scripting XSS vulnerability affecting www.library.yorku.ca, which at the time of submission ranked 11404 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

CVE-2010-3811

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element attributes...

Unfixed XSS vulnerability at wapgames.digi.com.my

Security researcher Wong Chieh Yie, has submitted on 13/11/2010 a cross-site-scripting XSS vulnerability affecting wapgames.digi.com.my, which at the time of submission ranked 15481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It...

Unfixed XSS vulnerability at gemsafarihawaii.com

Security researcher nullbyt3, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting gemsafarihawaii.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

Zomplog 3.9 Cross Site Scripting

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Unfixed XSS vulnerability at warszawa.adagio4.eu

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting warszawa.adagio4.eu, which at the time of submission ranked 5058573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at budk.com

Security researcher surbo, has submitted on 14/10/2010 a cross-site-scripting XSS vulnerability affecting budk.com, which at the time of submission ranked 43651 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed...

Unfixed XSS vulnerability at www.universcine.com

Security researcher Kokoriko, has submitted on 10/11/2010 a cross-site-scripting XSS vulnerability affecting www.universcine.com, which at the time of submission ranked 419109 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

CVE-2010-3730

CVE-2010-3730 affects Google Chrome prior to 6.0.472.62. The vulnerability arises from improper handling of a document’s origin when managing properties, enabling a remote attacker to induce an unspecified impact via a crafted web site (the so‑called “property pollution”). Publicly documented det...

CVE-2010-3261

Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors...

Unfixed XSS vulnerability at www.telekomadsl.net

Security researcher MURATHOCA, has submitted on 09/07/2010 a cross-site-scripting XSS vulnerability affecting www.telekomadsl.net, which at the time of submission ranked 15619342 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at death.org

Security researcher Uber0n, has submitted on 09/04/2010 a cross-site-scripting XSS vulnerability affecting death.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is currently unfixed. ...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Unfixed XSS vulnerability at library.umd.umich.edu

Security researcher p0pc0rn, has submitted on 08/12/2010 a cross-site-scripting XSS vulnerability affecting library.umd.umich.edu, which at the time of submission ranked 3022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

Mandriva Update for php MDVSA-2010:139 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:139 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Unfixed XSS vulnerability at lookr.tv

Security researcher cbr, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting lookr.tv, which at the time of submission ranked 640118 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed...

ShopCartDx <= v4.30 (products.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ============================================================== ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @;...