Cross site scripting

Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...

CVE-2008-4076

CVE-2008-4076 is an XSS vulnerability affecting multiple Tor World CGI-based products (Tor Board 1.3 and earlier; Topics BBS 1.11 and earlier; Simple BBS 1.86 and earlier; Interactive BBS 1.57 and earlier). Public sources describe an ability for remote attackers to inject arbitrary script/HTML in...

JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution

Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product. This vulnerability is...

Unfixed XSS vulnerability at world-of-warez.de

Security researcher kInGoFcHaOs, has submitted on 09/05/2008 a cross-site-scripting XSS vulnerability affecting world-of-warez.de, which at the time of submission ranked 517712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2008. It is...

FreeBSD Ports: nwclient

The remote host is missing an update to the system as announced in the referenced advisory. VID d177d9f9-e317-11d9-8088-00123f0f7307 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: wine

The remote host is missing an update to the system as announced in the referenced advisory. VID 48a59c96-9c6e-11d9-a040-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Unfixed XSS vulnerability at www.wowgoldvip.com

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.wowgoldvip.com, which at the time of submission ranked 133425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is current...

CVE-2008-3395

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for 1 webmail/libs/Atmail/Config.php and 2 webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files. NOTE: the provenance of this information is unknown; the details are obtained...

atmail-disclose.txt

!/usr/bin/perl LEGAL: Permission is granted to freely reproduce this document in its entirety under the condition that the contents are not altered in any way. milw0rm IS permitted to add their standard footer: // milw0rm.com / date Permission to view or reproduce this file is NOT granted to any...

Unfixed XSS vulnerability at www.kome-world.com

Security researcher xylitol, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.kome-world.com, which at the time of submission ranked 251088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/07/2008. It is...

Unfixed XSS vulnerability at www.myworldhardware.com

Security researcher xylitol, has submitted on 18/07/2008 a cross-site-scripting XSS vulnerability affecting www.myworldhardware.com, which at the time of submission ranked 4349824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/07/2008. It i...

Maian Scripts Cookie Manipulation Authentication Bypass

The remote host is running at least one PHP application from Maian Script World that allows a remote attacker to bypass authentication and access the admin control panel by simply setting a special cookie. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

CVE-2008-3168

The CVE-2008-3168 entry concerns Empire Server before version 4.3.15, where the files utility discloses the world creation time. This timing leak reduces entropy for the PRNG seed and is described as a vulnerability in the NVD entry; no exploit details are provided in the connected documents. The...

WeFi information leak

Log files are stored in world-readable folder...

S.T.A.L.K.E.R多个远程溢出和拒绝服务漏洞

BUGTRAQ ID: 29997 S.T.A.L.K.E.R.是由GSC Game World开发的第一人称射击游戏。 如果远程攻击者向S.T.A.L.K.E.R.游戏服务器发送了恶意报文的话，就可以触发缓冲区溢出或拒绝服务漏洞。 ---------------------------------------- A IPureServer::Recieve栈溢出 ----------------------------------------...

Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...

Window of the world browser such as local xss cross-domain vulnerability POC-vulnerability warning-the black bar safety net

Vulnerability description: http://www.80sec.com/360-sec-browser-localzone-xss. html Document source:http://www. 80sec. com/release/The-world-browser-locale-zone-xss-POC.txt Vulnerability analysis: the window of the world browser in the start page is res://E:\PROGRA1\THEWOR1.0\LANGUAGES\CHS.DLL...

NULL pointer in World in Conflict 1.008

Luigi Auriemma Application: World in Conflict http://www.worldinconflict.com Versions: = 1.008 Platforms: Windows Bug: NULL pointer Exploitation: remote, versus server Date: 22 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

World in Conflict空指针引用拒绝服务漏洞

BUGTRAQ ID: 29888 World in Conflict是Massive娱乐公司开发的一款RTS即时战略游戏。 World in Conflict处理畸形的请求数据时存在漏洞，如果远程攻击者向WIC服务器的主TCP游戏端口（默认48000）发送了0字节数据块的话，就会触发空指针引用，导致服务器崩溃。 Massive Entertainment World in Conflict = 1.008 Massive Entertainment --------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...