openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5158)

This update brings the Mozilla XULRunner engine to security update version 1.8.1.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...

Unfixed XSS vulnerability at shop.indiainfo.com

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting shop.indiainfo.com, which at the time of submission ranked 11331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/04/2008. It is...

Fixed XSS vulnerability at www.oebv.at

Security researcher Viper.aT, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.oebv.at, which at the time of submission ranked 1761365 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

Unfixed XSS vulnerability at ams.allenpress.com

Security researcher ironzorg, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting ams.allenpress.com, which at the time of submission ranked 52012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is...

Unfixed XSS vulnerability at www.sphere.com

Security researcher TreX, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.sphere.com, which at the time of submission ranked 41821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

CVE-2008-6203

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31666...

CVE-2008-6212

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31659...

openSUSE 10 Security Update : seamonkey (seamonkey-5153)

This update brings Mozilla SeaMonkey to security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via LiveConnect - MFSA...

Unfixed XSS vulnerability at www.all-nettools.com

Security researcher Uber0n, has submitted on 17/03/2008 a cross-site-scripting XSS vulnerability affecting www.all-nettools.com, which at the time of submission ranked 33869 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/04/2008. It is...

CVE-2008-1413

creationtimestamp| type| source ---|---|--- 2008-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31406...

GLSA-200803-17 : PDFlib: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200803-17 PDFlib: Multiple buffer overflows poplix reported multiple boundary errors in the pdcfsearchfopen function when processing overly long filenames. Impact : A remote attacker could send specially crafted content to a...

Solaris 8 (sparc) : 117586-22

IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Two vulnerabilities for PatchLink Update Client for Unix.

PatchLink Update Unix Client File clobbering vulnerability Larry W. Cashdollar Vapid Labs 1/17/2008 Overview From the vendor: “PatchLink Update™ provides rapid, accurate and secure patch management, allowing you to proactively manage threats by automating the collection, analysis and delivery of...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...

Fixed XSS vulnerability at www.dicionarioinformal.com.br

Security researcher mygotmanoel, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting www.dicionarioinformal.com.br, which at the time of submission ranked 104528 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.birthdayinabox.com

Security researcher holisticinfosec, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting www.birthdayinabox.com, which at the time of submission ranked 90071 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/01/2008...

Unfixed XSS vulnerability at delexpress.hudsonltd.net

Security researcher holisticinfosec, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting delexpress.hudsonltd.net, which at the time of submission ranked 240311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

appleupdate-exec.txt

--------------------------------------------------------------------- Apple Mac OS X Software Update Remote Command Execution Vulnerability Copyright c 2007 Moritz Jodeit 2007/12/17 --------------------------------------------------------------------- I. Vulnerability Description The OS X Softwar...

Unfixed XSS vulnerability at www.hugegaypass.com

Security researcher TreX, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.hugegaypass.com, which at the time of submission ranked 336558 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is...