Unfixed XSS vulnerability at www.goobble.it

Security researcher 3kb3ruqan, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.goobble.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Unfixed XSS vulnerability at www.magdeburg.de

Security researcher TurKPoweR, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.magdeburg.de, which at the time of submission ranked 118522 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...

Unfixed XSS vulnerability at www.dove-dormire.it

Security researcher 3kb3ruqan, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.dove-dormire.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

PTeX: Multiple vulnerabilities

Background PTeX is a TeX distribution with Japanese support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that PTeX builds upon GLSA 200709-17, GLSA 200711-26. PTeX also includes vulnerable code from the GD library GLSA...

openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5158)

This update brings the Mozilla XULRunner engine to security update version 1.8.1.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...

Unfixed XSS vulnerability at www.sphere.com

Security researcher TreX, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.sphere.com, which at the time of submission ranked 41821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

Unfixed XSS vulnerability at shop.indiainfo.com

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting shop.indiainfo.com, which at the time of submission ranked 11331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/04/2008. It is...

Fixed XSS vulnerability at www.oebv.at

Security researcher Viper.aT, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.oebv.at, which at the time of submission ranked 1761365 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

Unfixed XSS vulnerability at ams.allenpress.com

Security researcher ironzorg, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting ams.allenpress.com, which at the time of submission ranked 52012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is...

CVE-2008-6212

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31659...

CVE-2008-6203

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31666...

openSUSE 10 Security Update : seamonkey (seamonkey-5153)

This update brings Mozilla SeaMonkey to security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via LiveConnect - MFSA...

Unfixed XSS vulnerability at www.all-nettools.com

Security researcher Uber0n, has submitted on 17/03/2008 a cross-site-scripting XSS vulnerability affecting www.all-nettools.com, which at the time of submission ranked 33869 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/04/2008. It is...

CVE-2008-1413

creationtimestamp| type| source ---|---|--- 2008-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31406...

GLSA-200803-17 : PDFlib: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200803-17 PDFlib: Multiple buffer overflows poplix reported multiple boundary errors in the pdcfsearchfopen function when processing overly long filenames. Impact : A remote attacker could send specially crafted content to a...

Solaris 8 (sparc) : 117586-22

IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Two vulnerabilities for PatchLink Update Client for Unix.

PatchLink Update Unix Client File clobbering vulnerability Larry W. Cashdollar Vapid Labs 1/17/2008 Overview From the vendor: “PatchLink Update™ provides rapid, accurate and secure patch management, allowing you to proactively manage threats by automating the collection, analysis and delivery of...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...

Fixed XSS vulnerability at www.dicionarioinformal.com.br

Security researcher mygotmanoel, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting www.dicionarioinformal.com.br, which at the time of submission ranked 104528 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...