Unfixed XSS vulnerability at dbease.pojonews.com

Security researcher holisticinfosec, has submitted on 14/01/2008 a cross-site-scripting XSS vulnerability affecting dbease.pojonews.com, which at the time of submission ranked 49168 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It...

QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow

QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow Quicktime Player 7.3.1.70 rtsp Remote Buffer Overflow Exploit PoC https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4906.zip 2008-quicktimebof.zip milw0rm.com 2008-01-14...

Unfixed XSS vulnerability at www.thetorrentsite.com

Security researcher ZuLL, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.thetorrentsite.com, which at the time of submission ranked 7778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

CVE-2007-0012

CVE-2007-0012 affects Sun JRE 5.0 before update 14. An issue in the jpiexp32.dll can trigger a NULL pointer dereference when an HTML object tag encodes a Java applet without a defined name attribute, potentially crashing Internet Explorer/JRE. Exploitation described as remote and requiring a user...

Unfixed XSS vulnerability at www.arb.com.my

Security researcher DerickTham, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.arb.com.my, which at the time of submission ranked 664436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.link-checker.net

Security researcher meloulisi, has submitted on 14/11/2007 a cross-site-scripting XSS vulnerability affecting www.link-checker.net, which at the time of submission ranked 4794502 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

Unfixed XSS vulnerability at desktoplinux.com

Security researcher tenest, has submitted on 14/11/2007 a cross-site-scripting XSS vulnerability affecting desktoplinux.com, which at the time of submission ranked 32986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currentl...

Unfixed XSS vulnerability at www.ltu.se

Security researcher Uber0n, has submitted on 14/11/2007 a cross-site-scripting XSS vulnerability affecting www.ltu.se, which at the time of submission ranked 46482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Fedora 7 : openssl-0.9.8b-14.fc7 (2007-1444)

Fri Aug 3 2007 Tomas Mraz 0.9.8b-14 - use localhost in testsuite, hopefully fixes slow build in koji - CVE-2007-3108 - fix side channel attack on private keys 250577 - make ssl session cache id matching strict 233599 - Wed Jul 25 2007 Tomas Mraz 0.9.8b-13 - allow building on ARM architectures...

Fedora 7 : dovecot-1.0.3-14.fc7 (2007-1485)

A new upstream version fixing a few bugs. The quota-warning patch was added as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

Unfixed XSS vulnerability at www.all.by

Security researcher BeyazKurt, has submitted on 14/10/2007 a cross-site-scripting XSS vulnerability affecting www.all.by, which at the time of submission ranked 20204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/11/2007. It is currently...

lustig.cms BETA 2.5 (forum.php view) Remote File Inclusion Vulnerability

No description provided by source. lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell sebug.net...

lustig.cms Beta 2.5 - 'forum.php?view' Remote File Inclusion

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell milw0rm.com 2007-09-27...

Unfixed XSS vulnerability at www.emedicine.com

Security researcher Mutant, has submitted on 14/09/2007 a cross-site-scripting XSS vulnerability affecting www.emedicine.com, which at the time of submission ranked 5965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2007. It is currentl...

Unfixed XSS vulnerability at www.bburago.com

Security researcher HF Unreal, has submitted on 14/09/2007 a cross-site-scripting XSS vulnerability affecting www.bburago.com, which at the time of submission ranked 302477 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2007. It is...

Unfixed XSS vulnerability at www.lookquick.com

Security researcher Mutant, has submitted on 14/09/2007 a cross-site-scripting XSS vulnerability affecting www.lookquick.com, which at the time of submission ranked 644818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2007. It is...

HP OpenView Operations OVTrace buffer overflow

Added: 08/16/2007 CVE: CVE-2007-3872 BID: 25255 OSVDB: 39527 Background HP OpenView Operations is event management and performance monitoring software. Problem A buffer overflow vulnerability in HP OpenView Operations allows remote attackers to execute arbitrary commands by sending a specially...

HP OpenView Operations OVTrace buffer overflow

Added: 08/16/2007 CVE: CVE-2007-3872 BID: 25255 OSVDB: 39527 Background HP OpenView Operations is event management and performance monitoring software. Problem A buffer overflow vulnerability in HP OpenView Operations allows remote attackers to execute arbitrary commands by sending a specially...

HP OpenView Operations OVTrace buffer overflow

Added: 08/16/2007 CVE: CVE-2007-3872 BID: 25255 OSVDB: 39527 Background HP OpenView Operations is event management and performance monitoring software. Problem A buffer overflow vulnerability in HP OpenView Operations allows remote attackers to execute arbitrary commands by sending a specially...