524 matches found
Woo Custom Checkout Field <= 1.3.4 - CSRF & Stored XSS
Due to a lack of CSRF mitigation and entity encoding in the ccfinsert function found on line 118 of include/ccf.php and in the output generated by template/datagrid.php, it is possible to store and execute scripts in the context of an admin user. PoC...
Woo Email Control <= 1.01 - Reflected Cross-Site Scripting (XSS) & CSRF
Due to a lack of encoding and CSRF mitigation in the testemail function found on line 106 of classes/class-wooctrl.php, it is possible to automate a request to the AJAX handler for the wooctrlsendtestemail action which will reflect the specified script back to the end user. PoC...
Unfixed XSS vulnerability at www.hupo.tv
Security researcher Woo, has submitted on 09/04/2009 a cross-site-scripting XSS vulnerability affecting www.hupo.tv, which at the time of submission ranked 40792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2010. It is currently unfixe...
Unfixed XSS vulnerability at channel.patzzi.joins.com
Security researcher Woo, has submitted on 30/03/2009 a cross-site-scripting XSS vulnerability affecting channel.patzzi.joins.com, which at the time of submission ranked 6440 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is...
Unfixed XSS vulnerability at poke.ula.cc
Security researcher Woo, has submitted on 28/03/2009 a cross-site-scripting XSS vulnerability affecting poke.ula.cc, which at the time of submission ranked 15078 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currently unfixe...
Unfixed XSS vulnerability at news.onekoreanews.net
Security researcher Woo, has submitted on 28/03/2009 a cross-site-scripting XSS vulnerability affecting news.onekoreanews.net, which at the time of submission ranked 4643704 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...
Unfixed XSS vulnerability at news.onekoreanews.net
Security researcher Woo, has submitted on 28/03/2009 a cross-site-scripting XSS vulnerability affecting news.onekoreanews.net, which at the time of submission ranked 4643704 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...
Unfixed XSS vulnerability at www.nikkanberita.com
Security researcher Woo, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.nikkanberita.com, which at the time of submission ranked 498293 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...
Unfixed XSS vulnerability at www.mknews.jp
Security researcher Woo, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.mknews.jp, which at the time of submission ranked 8194153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is currently...
Unfixed XSS vulnerability at www.backchina.com
Security researcher Woo, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.backchina.com, which at the time of submission ranked 8301 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currently...
Unfixed XSS vulnerability at idol.mp3torrent.org
Security researcher Woo, has submitted on 01/04/2009 a cross-site-scripting XSS vulnerability affecting idol.mp3torrent.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is currently...
wmp-dos.txt
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?¡1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. áêìÑ éëúÎíþð§õ®ßäÒý áêÏÖÑõøÝÔÑÝèÊ° ÓÞÔÒË°â©ù¼ãÁò× Ü¬×¨Ò´Ò´ôÕÖà÷î If you open the kr.aiff in Window...
Windows Media Player AIFF Divide By Zero Exception DoS PoC
No description provided by source. / Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. áêì éúí§ áêè° °ù¼ò× ×¨à÷...
Microsoft Windows Media Player - '.AIFF' Divide By Zero Exception Denial of Service (PoC)
/ Windows Media Player AIFF Divide By Zero Exception DOS POC by Hong Gil-Dong, Jeon Woo-chi Jeong Ji-Sang ?∼1135, He was one of the most famous korean poet. This poem says sadness about good-bye'. é€äºº 雨æ‡é•·å ¤è‰è‰²å¤š é€å›å—æµ¦å‹•æ‚²æŒ å¤§åŒæ±Ÿæ°´ä½•æ™‚盡 åˆ¥æ·šå¹´å¹´æ·»ç¶ æ³¢ ...
Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)
No description provided by source. !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz grabarz at grabarz.info Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584...
Microsoft Internet Explorer - TIFTIFF Code Execution (MS07-055)
Microsoft Internet Explorer - TIFTIFF Code Execution MS07-055 !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBa...
Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)
No description provided by source. / MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right...
Kodak Image Viewer - TIFTIFF Code Execution (MS07-055)
Kodak Image Viewer - TIFTIFF Code Execution MS07-055 / MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to...
Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)
Exploit for unknown platform in category local exploits ================================================================= Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC MS07-055 ================================================================= / MS07-055 Kodak Image Viewer TIF/TIFF Code...
kodak-exec.txt
/ MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right. Hwang-Hee listend their story, and...