Mozilla Foundation Security Advisory 2007-21

Mozilla Foundation Security Advisory 2007-21 Title: Privilege escallation using an event handler attached to an element not in the document Impact: Critical Announced: July 17, 2007 Reporter: mozbugra4 Products: Firefox Fixed in: Firefox 2.0.0.5 Description An attecker can use an element outside ...

HP System Management Homepage cross-site scripting vulnerability

Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...

GLSA-200705-17 : Apache mod_security: Rule bypass

The remote host is affected by the vulnerability described in GLSA-200705-17 Apache modsecurity: Rule bypass Stefan Esser discovered that modsecurity processes NULL characters as terminators in POST requests using the application/x-www-form-urlencoded encoding type, while other parsers used in we...

Unfixed XSS vulnerability at www.chass.utoronto.ca

Security researcher MaXWeL, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.chass.utoronto.ca, which at the time of submission ranked 3151 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Unfixed XSS vulnerability at www.oyuntc.com

Security researcher By Encore, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.oyuntc.com, which at the time of submission ranked 535784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Unfixed XSS vulnerability at www.erzurumlu.net

Security researcher cyber, has submitted on 17/04/2007 a cross-site-scripting XSS vulnerability affecting www.erzurumlu.net, which at the time of submission ranked 268648 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2007. It is current...

Unfixed XSS vulnerability at board.nevertellmetheodds.org

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting board.nevertellmetheodds.org, which at the time of submission ranked 367531 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. I...

Unfixed XSS vulnerability at weblabor.hu

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting weblabor.hu, which at the time of submission ranked 56692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is currently...

Unfixed XSS vulnerability at www.isualum.org

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.isualum.org, which at the time of submission ranked 1914404 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is current...

Unfixed XSS vulnerability at www.splatsearch.com

Security researcher zuppergazi, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.splatsearch.com, which at the time of submission ranked 67712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.leonardo-forum.ch

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.leonardo-forum.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is current...

Unfixed XSS vulnerability at www.xmlandasp.net

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.xmlandasp.net, which at the time of submission ranked 1234933 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.themesbase.com

Security researcher 0ssi3, has submitted on 17/02/2007 a cross-site-scripting XSS vulnerability affecting www.themesbase.com, which at the time of submission ranked 15079 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2007. It is current...

Unfixed XSS vulnerability at www.lovegodsway.org

Security researcher i-landet, has submitted on 17/02/2007 a cross-site-scripting XSS vulnerability affecting www.lovegodsway.org, which at the time of submission ranked 67982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2007. It is...

MOAB-17-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

PHPMyphorum 1.5a File Include Vulnerability

PHPMyphorum 1.5a Class: File Include Vulnerability Published 2007/1/17 Remote: Yes Critical Level : Dangerous Site: http://www.comscripts.com/scripts/php.phpmyphorum.1104.html Author: TheViper-hacker Contact: [email protected] file ; frame.php...

Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

PHPMyphorum 1.5a - mepframe.php Remote File Inclusion

PHPMyphorum 1.5a - mepframe.php Remote File Inclusion PHPMyphorum 1.5a Class: File Include Vulnerability Published 2007/1/17 Remote: Yes Critical Level : Dangerous Site: http://www.comscripts.com/scripts/php.phpmyphorum.1104.html Author: TheViper-hacker Contact: [email protected] file ;...

PHPMyphorum 1.5a (mep/frame.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHPMyphorum 1.5a mep/frame.php Remote File Include Vulnerability ================================================================== PHPMyphorum 1.5a Class: File Include...

Taobao password guessing-vulnerability warning-the black bar safety net

| The following is quoted fragment: % 'Test Taobao landing 'Coded '2006-4-17 Response. Buffer = False Dim myUser,myPass myUser = "username" myPass = "password" Response. Write CheckPassmyUser,myPass '-----------------Package to determine the function begin---------------- Function...