Unfixed XSS vulnerability at www.blumerio.ch

Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.blumerio.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currently...

Unfixed XSS vulnerability at idol.mp3torrent.org

Security researcher Woo, has submitted on 01/04/2009 a cross-site-scripting XSS vulnerability affecting idol.mp3torrent.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is currently...

Unfixed XSS vulnerability at www.wfsj.org

Security researcher Skunkfoot, has submitted on 01/03/2009 a cross-site-scripting XSS vulnerability affecting www.wfsj.org, which at the time of submission ranked 969386 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currentl...

Unfixed XSS vulnerability at kausti.com

Security researcher Uber0n, has submitted on 01/01/2009 a cross-site-scripting XSS vulnerability affecting kausti.com, which at the time of submission ranked 17755836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2009. It is currently...

CVE-2009-0705

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7641...

CVE-2008-6758

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7628...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : seamonkey (SSA:2008-362-01)

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-362-01. The text itself ...

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:1037-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Solaris 8 (x86) : 138886-01

SunOS 5.8x86: rpc.ypupdated patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 139459-01

SunOS 5.10: libcrypto.so.0.9.7 patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 139391-01

SunOS 5.10x86: lpadmin and ppdmgr patch. Date this patch was last updated by Sun : Dec/12/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 139390-01

SunOS 5.10: lpadmin and ppdmgr patch. Date this patch was last updated by Sun : Dec/12/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (sparc) : 138575-01

SunOS 5.9: rpc.ypupdated patch. Date this patch was last updated by Sun : Nov/21/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unfixed XSS vulnerability at www.kkl.lt

Security researcher F3nix, has submitted on 12/01/2008 a cross-site-scripting XSS vulnerability affecting www.kkl.lt, which at the time of submission ranked 228218 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is currently...

CVE-2008-6887

creationtimestamp| type| source ---|---|--- 2008-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32609...

CVE-2008-6284

creationtimestamp| type| source ---|---|--- 2008-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7311...

CVE-2008-6381

creationtimestamp| type| source ---|---|--- 2008-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7317...

Vim多个插件字符转义任意命令执行漏洞

BUGTRAQ ID: 32462,32463 CVECAN ID: CVE-2008-3074,CVE-2008-3074 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的tar.vim和zip.vim插件中shellescape函数没有正确地转义所有项（“!”字符）。如果用户使用tar.vim插件打开了TAR文档的话，就会导致以运行Vim用户的权限执行任意指令。 VIM Development Group VIM 7.1 VIM Development Group VIM 7.0 RedHat ------...

Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-325-01)

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-325-01. The te...