Mozilla Suite/Firefox Navigator Object Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core/constants' require 'msf/core'...

Unfixed XSS vulnerability at www.siteduzero.com

Security researcher Mystick, has submitted on 25/10/2009 a cross-site-scripting XSS vulnerability affecting www.siteduzero.com, which at the time of submission ranked 6996 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq -...

DSA-1915-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

Solaris 10 (sparc) : 119280-25 (deprecated)

CDE 1.6: Runtime library patch for Solaris. Date this patch was last updated by Sun : Dec/10/10 This plugin has been deprecated and either replaced with individual 119280 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Network Management/Inventory System [header.php] Remote File Include

No description provided by source. Network Management/Inventory System header.php Remote File Include Vulnerability ----------------------------------------------------------------------------------...

ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= ClearSite 4.50 csbasepath Remote File Inclusion Vulnerability ================================================================= Network Management/Inventory System header.ph...

Unfixed Script Insertion vulnerability at turkanow.nl

Security researcher Killer-TR, has submitted on 25/08/2009 a Script Insertion vulnerability affecting turkanow.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed. If...

Unfixed XSS vulnerability at results.mu.ac.in

Security researcher Tr0n, has submitted on 25/07/2009 a cross-site-scripting XSS vulnerability affecting results.mu.ac.in, which at the time of submission ranked 39715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is currently...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-793-1)

Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...

CVE-2009-2611

creationtimestamp| type| source ---|---|--- 2009-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9018...

Debian: Security Advisory (DSA-1820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Security Advisory SUSE-SA:2009:034 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:034. OpenVAS Vulnerability Test $Id: susesa2009034.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:034 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

S-CMS 2.0b3 - Multiple Local File Inclusions

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE LOC...

Solaris Update for lp 114980-25

Check for the Version of lp OpenVAS Vulnerability Test Solaris Update for lp 114980-25 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

DDIVRT-2009-25 IPsession SQL Injection Vulnerability

Title ----- DDIVRT-2009-25 IPsession SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- March 31, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...

Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE SQL...

Unfixed XSS vulnerability at www1.gantep.edu.tr

Security researcher BlueMax, has submitted on 25/04/2009 a cross-site-scripting XSS vulnerability affecting www1.gantep.edu.tr, which at the time of submission ranked 165314 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...