Unfixed XSS vulnerability at www.t-series.com

Security researcher tr0n, has submitted on 07/09/2009 a cross-site-scripting XSS vulnerability affecting www.t-series.com, which at the time of submission ranked 11187848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is current...

T-Mobile data on Full Disclosure is real

T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1819

CVE-2009-1819 is a SQL injection vulnerability in the 2daybiz Custom T-shirt Design Script (product.php) that allows remote attackers to execute arbitrary SQL commands via the id parameter. Root cause: unsanitized input in a PHP script leading to injection. The exploitation vector is network-base...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

No description provided by source. -------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail:...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

Exploit for unknown platform in category web applications ============================================================= 2daybiz Custom T-shirt Design SQL/XSS Multiple Remote Vulns ============================================================= -------------------------AllaH...

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

-------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Design/Logic Flaw

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz Home:WwW.h4ckF0u.CoM...

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability...

T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ====================================================================== T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability ======================================================================...

Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities

No description provided by source. Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact :...