Zeema CMS Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about Brute Force, Cross-Site Scripting and Full path disclosure vulnerabilities in Zeema CMS. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are all versions of Zeema CMS. ---------- Details:...

Unfixed XSS vulnerability at www.dersrehberi.com

Security researcher KandemiR, has submitted on 24/11/2011 a cross-site-scripting XSS vulnerability affecting www.dersrehberi.com, which at the time of submission ranked 1736959 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Mambo 4.x - 'Zorder' SQL Injection

Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : - The "zorder" parameter was not...

Unfixed XSS vulnerability at www.gay.tv

Security researcher Trueliarx, has submitted on 26/10/2011 a cross-site-scripting XSS vulnerability affecting www.gay.tv, which at the time of submission ranked 70787 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

zFTPServer - 'cwd/stat' Remote Denial of Service

!/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server version 2011-04-13 08:59' title = ' "cwd" Remote...

zFTPServer - cwdstat Remote Denial of Service

zFTPServer - cwdstat Remote Denial of Service !/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server...

CVE-2011-2003

creationtimestamp| type| source ---|---|--- 2011-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17978...

Unfixed XSS vulnerability at www.fededirectory.frb.org

Security researcher SeeMe, has submitted on 10/11/2011 a cross-site-scripting XSS vulnerability affecting www.fededirectory.frb.org, which at the time of submission ranked 147174 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Opera Browser 10/11/12 (SVG layout) Memory Corruption

Exploit for Opera Browser 10/11/12 SVG layout Memory Corruption 0day Vulnerability: Discovered: 2010-10-13 Patched: 0day Tested on: v10.xx v10.50, v10.51, v10.52, v10.53, v10.54, v10.6, v10.61, v10.62 and v10.63 v11.xx v11.00, v11.01, v11.10, v11.11, v11.50 and v11.51 Exploit: Coded: 2010-10-14...

CVE-2012-6625

creationtimestamp| type| source ---|---|--- 2011-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17828...

Уязвимости в JBoss Application Server

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Brute Force уязвимостях в JBoss Application Server. Information Leakage WASC-13: http://site/status http://site/status?full=true Публично доступная статистика работы сервера с перечнем всех его сервисов. Brute Force WASC-11:...

Unfixed XSS vulnerability at www.paginasclaro.com.ar

Security researcher RemoteExecution, has submitted on 13/09/2011 a cross-site-scripting XSS vulnerability affecting www.paginasclaro.com.ar, which at the time of submission ranked 729462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/201...

MS11-072: Vulnerabilities in Microsoft Excel could allow remote code execution: September 13, 2011

Resolves security vulnerabilities in Microsoft Excel that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS11-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-070: Vulnerability in WINS could allow elevation of privilege: September 13, 2011

None None...

Unfixed XSS vulnerability at bestnefinancialplanners.com

Security researcher TheLegend, has submitted on 14/08/2011 a cross-site-scripting XSS vulnerability affecting bestnefinancialplanners.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It i...

Null pointer dereference

Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

[slackware-security] dhcpcd (SSA:2011-210-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2011-210-02 New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+...

Stable Channel Update

The Google Chrome team is pleased to announce the arrival of Chrome 13.0.782.107 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Spanning 5200+ revisions, Chrome 13 contains some exciting new features like Instant Pages prerendering technology. To find out about other new feature...

Unfixed XSS vulnerability at www.redscan.com

Security researcher Megid, has submitted on 28/07/2011 a cross-site-scripting XSS vulnerability affecting www.redscan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

MyST BlogSite URL Redirect / Information Leakage

=============================== MyST BlogSite | Multiple Vulnerabilities =============================== 1. VULNERABILITY DESCRIPTION -- Issue Title: Arbitrary URL Redirect Component: MyST BlogSite ClickDirector Ref: OWASP - Top 10 - 2010 - A10 Ref-Link:...