Fedora 14 : phpMyAdmin-3.3.10-1.fc14 (2011-3737)

Changes for 3.3.10.0 2011-03-19 - structure Aria table size printed as unknown, thanks to erickoh75 - erickoh75 - structure Ordering by size gives incorrect results, thanks to Madhura Jayaratne - madhuracj - core 0 rows affected - core Edit relational page and page number - security Minor securit...

XSS, SQL Injection и SQL DB Structure Extraction уязвимости в Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting, SQL Injection и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS WASC-08 также работают в версии 15.0: http://site/catalog/3Cscript3Ealertdocument.cookie3C/script3E/...

Gentoo Security Advisory GLSA 201006-19 (bugzilla)

The remote host is missing updates announced in advisory GLSA 201006-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora 14 : dhcp-4.2.0-19.P2.fc14 (2011-0862)

A flaw was discovered in the way the dhcpd daemon processed a message for an address that had been previously declined and internally tagged as abandoned. Processing such a message could trigger an assert failure that could crash dhcpd if it was running as a DHCPv6 server. DHCPv4 servers are...

SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 /...

Fabrica Engine 2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting, Denial of Service and SQL Injection vulnerabilities in Fabrica Engine which I found in 2008 and 2009 at web site of one online shop. It's commercial engine for online shops. SecurityVulns ID: 11274. ------------------------- Affected...

Joomla Jeajaxeventcalendar Local File Inclusion

======================================================================= Joomla Component comjeajaxeventcalendar LFI Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'...

Google Chrome 7.0.517.44 DLL Hijacking Exploit 2 (icudt42.dll)

Exploit for windows platform in category local exploits ============================================================== Google Chrome 7.0.517.44 DLL Hijacking Exploit 2 icudt42.dll ============================================================== Title: Google Chrome 7.0.517.44 DLL Hijacking...

Comodo Dragon Internet Browser 6.0.0.10 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ============================================================= Comodo Dragon Internet Browser 6.0.0.10 DLL Hijacking Exploit ============================================================= Title: Comodo Dragon Internet Browser 6.0.0.10 DLL...

Unfixed Redirect vulnerability at www.phpkode.com

Security researcher hexon, has submitted on 19/11/2010 a Redirect vulnerability affecting www.phpkode.com, which at the time of submission ranked 18843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/03/2011. It is currently unfixed. If you...

Unfixed XSS vulnerability at www.jobpol.be

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting www.jobpol.be, which at the time of submission ranked 1063165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

Mozilla Foundation Security Advisory 2010-66

Mozilla Foundation Security Advisory 2010-66 Title: Use-after-free error in nsBarProp Impact: Critical Announced: October 19, 2010 Reporter: Sergey Glazunov Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird 3.0.9 SeaMonkey 2.0.9...

Mozilla Foundation Security Advisory 2010-65

Mozilla Foundation Security Advisory 2010-65 Title: Buffer overflow and memory corruption using document.write Impact: Critical Announced: October 19, 2010 Reporter: Alexander Miller Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.11 Firefox 3.5.14 Thunderbird 3.1.5 Thunderbird...

Unfixed XSS vulnerability at www.melkweg.nl

Security researcher AndMyXSS, has submitted on 19/10/2010 a cross-site-scripting XSS vulnerability affecting www.melkweg.nl, which at the time of submission ranked 120783 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is current...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

Novell iPrint Client ActiveX Control call-back-url Buffer Overflow

Novell iPrint Client ActiveX Control call-back-url Buffer Overflow. CVE-2010-1527. Remote exploit for windows platform $Id: novelliprintcallbackurl.rb 10429 2010-09-21 18:46:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions...

Novell iPrint Client - ActiveX Control call-back-url Buffer Overflow (Metasploit)

Novell iPrint Client - ActiveX Control call-back-url Buffer Overflow Metasploit $Id: novelliprintcallbackurl.rb 10429 2010-09-21 18:46:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework we...

CVE-2010-3680

creationtimestamp| type| source ---|---|--- 2010-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34505...

Elite Gaming Ladders 3.5 Cross Site Scripting

Elite Gaming Ladders v3.5 Multiple Vulnerabilities - ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://eliteladders.com/ - Vulnerability - http://site.com/path/stats.php?account=SQL INj XSS in porfile login and go to...

Saffa Tunes CMS (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Saffa Tunes CMS news.php SQL Injection Vulnerability ====================================================== Exploit Title: Saffa Tunes CMS news.php SQL Injection Vulnerability Author: Th3...