Unfixed XSS vulnerability at www.ozgurgundem.org

Security researcher BackDoor, has submitted on 18/11/2007 a cross-site-scripting XSS vulnerability affecting www.ozgurgundem.org, which at the time of submission ranked 245274 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

GLSA-200711-18 : Cpio: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200711-18 Cpio: Buffer overflow A buffer overflow vulnerability in the safernamesuffix function in GNU cpio has been discovered. Impact : A remote attacker could entice a user to open a specially crafted archive file resulting in ...

Unfixed XSS vulnerability at www.spanishdict.com

Security researcher turbocharged06, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.spanishdict.com, which at the time of submission ranked 27658 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It ...

Unfixed XSS vulnerability at www.loopmail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.loopmail.de, which at the time of submission ranked 8864695 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

modifyform - modifyform.html Remote File Inclusion

modifyform - modifyform.html Remote File Inclusion modifyform RFI author: mozi original post: http://darkcode.h1x.com/forum/ dork: inurl: modifyform.html?code= thanks: str0ke, d3hydr8 milw0rm.com 2007-09-18...

Unfixed XSS vulnerability at www.sentenceseek.com

Security researcher www.r3t.n3t.nl, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.sentenceseek.com, which at the time of submission ranked 1405088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. ...

modifyform - 'modifyform.html' Remote File Inclusion

modifyform RFI author: mozi original post: http://darkcode.h1x.com/forum/ dork: inurl: modifyform.html?code= thanks: str0ke, d3hydr8 milw0rm.com 2007-09-18...

2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 2532|Gigs 1.2.1 activateuser.php Local File Inclusion Vulnerability =====================================================================...

Solaris 5.8 (x86) : 120982-18

Sun Java System Web Proxy Server 4.0.11, x86 SVR4 patch: Mainte. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.9 (x86) : 120982-18

Sun Java System Web Proxy Server 4.0.11, x86 SVR4 patch: Mainte. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.8 (sparc) : 120981-18

Sun Java System Web Proxy Server 4.0.11, Solaris SVR4 patch: Mai. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.9 (sparc) : 120981-18

Sun Java System Web Proxy Server 4.0.11, Solaris SVR4 patch: Mai. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.10 (x86) : 120982-18

Sun Java System Web Proxy Server 4.0.11, x86 SVR4 patch: Mainte. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Debian DSA-1298-1 : otrs2 - missing input sanitising

It was discovered that the Open Ticket Request System performs insufficient input sanitising for the Subaction parameter, which allows the injection of arbitrary web script code. The oldstable distribution sarge doesn't include otrs2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

GLSA-200705-18 : PPTPD: Denial of Service attack

The remote host is affected by the vulnerability described in GLSA-200705-18 PPTPD: Denial of Service attack James Cameron from HP has reported a vulnerability in PPTPD caused by malformed GRE packets. Impact : A remote attacker could exploit this vulnerability to cause a Denial of Service on the...

Unfixed XSS vulnerability at easy-hit-counters.com

Security researcher St@rExT, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting easy-hit-counters.com, which at the time of submission ranked 165067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Unfixed XSS vulnerability at the-riotact.com

Security researcher Hotpockets, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting the-riotact.com, which at the time of submission ranked 784221 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

LeadTools JPEG 2000 COM Object Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ LeadTools JPEG 2000 COM Object Remote Stack Overflow Exploit ============================================================ 2007/05/18...

CVE-2007-2531

CVE-2007-2531 affects Berylium2 (2003-08-18) where PHP remote file inclusion is possible in berylium-classes.php via the beryliumroot parameter. The underlying issue is including a remote file without proper validation, allowing an attacker to execute arbitrary PHP code on the affected system. Pu...

GLSA-200704-18 : Courier-IMAP: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-18 Courier-IMAP: Remote execution of arbitrary code CJ Kucera has discovered that some Courier-IMAP scripts don't properly handle the XMAILDIR variable, allowing for shell command injection. Impact : A remote attacker could...