Unfixed XSS vulnerability at stud.mediehogskolen.no

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting stud.mediehogskolen.no, which at the time of submission ranked 4464002 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at ezhik.org.ru

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ezhik.org.ru, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at politpiar.ru

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting politpiar.ru, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at www.familien-hvolgaard.dk

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.familien-hvolgaard.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.fedhost.ch

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.fedhost.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at simples.italnet.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting simples.italnet.com.br, which at the time of submission ranked 405571 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.eplay.it

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.eplay.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at eniact.nl

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting eniact.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at www.flapag.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.flapag.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It i...

Unfixed XSS vulnerability at www.moolandia.com.ar

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.moolandia.com.ar, which at the time of submission ranked 6255890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at ns1.mnet.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ns1.mnet.com.br, which at the time of submission ranked 532437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. I...

Unfixed XSS vulnerability at hit-fr.net

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting hit-fr.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at ns1.norteserver.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ns1.norteserver.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007...

Unfixed XSS vulnerability at www.axt.it

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.axt.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at www.coletta.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.coletta.com.br, which at the time of submission ranked 2905310 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/200...

Design/Logic Flaw

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2007-0977

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2007-0977

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2007-0977

CVE-2007-0977 involves IBM Lotus Domino R5/R6 WebMail. When the option “Generate HTML for all fields” is enabled (default in these versions), HTTPPassword hashes and related data from names.nsf can be read via ReadViewEntries/OpenDocument on the defaultview, exposing passwords and client/version ...

Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit

No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, ...