Fixed XSS vulnerability at www.freistaat.org

Security researcher Fabian Fingerle, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.freistaat.org, which at the time of submission ranked 9262730 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It...

Joomla Component joomlaXplorer <= 1.6.2 Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Joomla Component joomlaXplorer target.com/path/index.php?option=comjoomlaxplorer&action=showerror&dir=../../directory example :...

Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

wikepageopus-traverse.txt

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/28664/info Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

JVN#21563357 Mozilla Firefox cross-site scripting vulnerability

Mozilla Firefox does not properly handle certain HTML documents in ShiftJIS encoding. According to MFSA 2008-13, this flaw could potentially be used to evade web-site input filters and result in a XSS attack hazard. Impact An arbitrary script may be executed on the user's web browser. Solution...

AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Format String Vulnerability in Logger and Manager |...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.216 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue....

Unfixed XSS vulnerability at www.dealtime.co.uk

Security researcher mygotmanoel, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting www.dealtime.co.uk, which at the time of submission ranked 14466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at nedir.sempatiksitem.com

Security researcher SeYMeN, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting nedir.sempatiksitem.com, which at the time of submission ranked 809027 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Solaris 10 (sparc) : 125731-13 (deprecated)

SunOS 5.10: XML and XSLT libraries patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 125731 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Debian: Security Advisory (DSA-864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.thetorrentsite.com

Security researcher ZuLL, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.thetorrentsite.com, which at the time of submission ranked 7778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

Unfixed XSS vulnerability at www.aikos.smm.lt

Security researcher F3nix, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.aikos.smm.lt, which at the time of submission ranked 56311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is currently...

Code injection

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

CVE-2007-6679

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

Unfixed XSS vulnerability at galleries.extremekream.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting galleries.extremekream.com, which at the time of submission ranked 29756 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Unfixed XSS vulnerability at www.devbistro.com

Security researcher flux, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.devbistro.com, which at the time of submission ranked 73821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently...