Unfixed XSS vulnerability at www.savoiedecision.com

Security researcher Uber0n, has submitted on 08/01/2009 a cross-site-scripting XSS vulnerability affecting www.savoiedecision.com, which at the time of submission ranked 23833502 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is...

CVE-2009-2781

creationtimestamp| type| source ---|---|--- 2009-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9320...

Solaris 10 (x86) : 141931-01

SunOS 5.10x86: libsasl.so.1 patch. Date this patch was last updated by Sun : Jul/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-509)

The Mozilla Firefox browser is updated to version 3.0.6 fixing various security and stability issues. MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-509)

The Mozilla Firefox browser is updated to version 3.0.6 fixing various security and stability issues. MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

Solaris 10 (sparc) : 141910-01

SunOS 5.10: ntpq patch. Date this patch was last updated by Sun : Jul/07/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

GLSA-200907-01 : libwmf: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-01 libwmf: User-assisted execution of arbitrary code The embedded fork of the GD library introduced a 'use-after-free' vulnerability in a modification which is specific to libwmf. Impact : A remote attacker could entice a...

Unfixed XSS vulnerability at www.vdare.com

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.vdare.com, which at the time of submission ranked 80443 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...

Unfixed XSS vulnerability at www.connexionsdirect.co.uk

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.connexionsdirect.co.uk, which at the time of submission ranked 23724937 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010...

Unfixed XSS vulnerability at www.berlin-partner.de

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.berlin-partner.de, which at the time of submission ranked 466890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is...

CVE-2009-2330

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9069...

CVE-2009-2384

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9061...

Solaris 9 (sparc) : 141396-01

SunOS 5.9: usr/sbin/ntpq patch. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (x86) : 141397-01

SunOS 5.9x86: usr/sbin/ntpq patch. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Apache HTTP Server AllowOverride选项绕过安全限制漏洞

BUGTRAQ ID: 35115 CVECAN ID: CVE-2009-1195 Apache HTTP Server是一款流行的Web服务器。 Apache HTTP Server没有正确地处理AllowOverride指令中的Options=IncludesNOEXEC选项，本地用户可以通过在.htaccess文件中配置1 Options Includes、2 Options +Includes或3 Options +IncludesNOEXEC并在.shtml文件中注入exec元素导致绕过安全限制获得权限。 Apache 2.2.x 厂商补丁： Apache Group...

tbdev 01-01-2008 - Multiple Vulnerabilities

tbdev 01-01-2008 - Multiple Vulnerabilities TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 16th January 2008 newest Info: TBDEV.NET is a project to further enhance, update and develop a software php peer-to-peer from the original torrentbits/bytemonso...

TBDev 01-01-2008 Multiple Remote Vulnerabilities

No description provided by source. TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 16th January 2008 newest Info: TBDEV.NET is a project to further enhance, update and develop a software php peer-to-peer from the original torrentbits/bytemonsoon source...

CUPS pdftops过滤器多个整数溢出漏洞

BUGTRAQ ID: 35195 CVECAN ID: CVE-2009-0791 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的pdftops过滤器中存在多个可能导致堆溢出的整数溢出漏洞。攻击者可以创建恶意的PDF文件，如果打印了该文件就会导致pdftops崩溃或以运行lp用户的权限执行任意指令。 Easy Software Products CUPS 1.1.22 厂商补丁： Easy Softwar...

Pixelactivo 3.0 (idx) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pixelactivo 3.0 idx Remote SQL Injection Vulnerability ======================================================== -------------------------AllaH AkbaR-------------------------------...

Solaris 10 (sparc) : 141719-01

SunOS 5.10: libgss.so.1 patch. Date this patch was last updated by Sun : Jun/03/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...