Unfixed XSS vulnerability at www.dii.unisi.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.dii.unisi.it, which at the time of submission ranked 75542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.fritolay.com.tr

Security researcher Kara, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.fritolay.com.tr, which at the time of submission ranked 1025999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.gmail.it

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.gmail.it, which at the time of submission ranked 421085 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at harzack.freeshell.org

Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting harzack.freeshell.org, which at the time of submission ranked 65641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

XPCNativeWraper pollution using Script object — Mozilla

Mozilla security researcher mozbugra4 reported that it was possible to use the Script object to modify XPCNativeWrappers in such a way that subsequent access by the browser chrome--such as by right-clicking to open a context menu--can cause attacker-supplied javascript to run with the same...

Fedora Core 6 : openssh-4.3p2-25.fc6 (2007-715)

Tue Oct 2 2007 Tomas Mraz - 4.3p2-25 - do not fall back on trusted X11 cookies CVE-2007-4752 280471 - Fri Jul 13 2007 Tomas Mraz - 4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 - Thu Jun 21 2007 Tomas Mraz - 4.3p2-23 - document where the nss certificate and token dbs are...

Unfixed XSS vulnerability at portal2.ch

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting portal2.ch, which at the time of submission ranked 1161075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at anzwers.com.au

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting anzwers.com.au, which at the time of submission ranked 105744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at www.m-2.ru

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.m-2.ru, which at the time of submission ranked 213020 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is currently...

Unfixed XSS vulnerability at www.soton.university2business.co.uk

Security researcher shadowls, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.soton.university2business.co.uk, which at the time of submission ranked 6210364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2007-3430

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action...

sitedepth-lfi.txt

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

Unfixed XSS vulnerability at beta.hackthissite.org

Security researcher PouyaServer, has submitted on 25/06/2007 a cross-site-scripting XSS vulnerability affecting beta.hackthissite.org, which at the time of submission ranked 49185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/06/2007. It i...

fusetalkautherror-xss.txt

Hello everyone, After trying to report a SQL bug autherror.cfm to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure...

GLSA-200705-25 : file: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200705-25 file: Integer overflow Colin Percival from FreeBSD reported that the previous fix for the fileprintf buffer overflow introduced a new integer overflow. Impact : A remote attacker could entice a user to run the file progr...

CVE-2007-2900

Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to template.php in 1 skin/dark/, 2 skin/gold/, or 3 skin/original/...

LeadTools Raster Dialog File_D Object Remote Buffer Overflow Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/25/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"--------------------------------------------------------------------------------------------------- bLeadTools Raster...

Unfixed XSS vulnerability at bloodhacker.forumup.com

Security researcher St@rExT, has submitted on 25/05/2007 a cross-site-scripting XSS vulnerability affecting bloodhacker.forumup.com, which at the time of submission ranked 2768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/05/2007. It is...

Unfixed XSS vulnerability at z0ne-h.net

Security researcher St@rExT, has submitted on 25/05/2007 a cross-site-scripting XSS vulnerability affecting z0ne-h.net, which at the time of submission ranked 249865 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/05/2007. It is currently...

LeadTools Raster Dialog File_D Object Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ==================================================================== LeadTools Raster Dialog FileD Object Remote Buffer Overflow Exploit ==================================================================== 2007/05/25...