Moderate: tomcat security update

5.5.23-0jpp.3.0.2 - Patch for CVE-2007-3382 and CVE-2007-3385 Resolves: rhbz254155 5.5.23-0jpp.3.0.1 - Patch for CVE-2007-3386 Resolves: rhbz254155...

Unfixed XSS vulnerability at www.soso-web.com

Security researcher kusomiso.com, has submitted on 26/09/2007 a cross-site-scripting XSS vulnerability affecting www.soso-web.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at ym.to

Security researcher kusomiso.com, has submitted on 26/09/2007 a cross-site-scripting XSS vulnerability affecting ym.to, which at the time of submission ranked 1748758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is currently...

Mandrake Linux Security Advisory : postgresql (MDKSA-2007:188)

PostgreSQL 8.1 and probably later and earlier versions, when local trust authentication is enabled and the Database Link library dblink is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from...

RHEL 2.1 / 3 / 4 / 5 : gimp (RHSA-2007:0513)

Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple...

[ MDKSA-2007:188 ] - Updated postgresql packages prevent access abuse using dblink

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:188 http://www.mandriva.com/security/ Package : postgresql Date : September 25, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: PostgreSQL 8.1 and probably later and earlier...

Unfixed XSS vulnerability at www.emdthal.ch

Security researcher Narcoticxs, has submitted on 26/09/2007 a cross-site-scripting XSS vulnerability affecting www.emdthal.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

simpnews24103-xss.txt

netVigilance Security Advisory 70 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities Description: SimpNews is a news system written in PHP. Features: Data stored in MySQL, admin interface, support for multiple languages, support for multiple instances in one database, own header, multip...

Core Security Technologies Advisory 2007.0817

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Ask.com Toolbar 4.0.2.53. An attacker may be able to execute arbitrary code by sending an overly long string to the "ShortFormat" method in askbar.dll. This module requires Metasploit: https://metasploit.com/download Current source:...

Unfixed XSS vulnerability at portal2.ch

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting portal2.ch, which at the time of submission ranked 1161075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

ImageMagick ReadDIBImage函数整数溢出漏洞

BUGTRAQ ID: 25765 CVECAN ID: CVE-2007-4988 ImageMagick是一款Unix/Linux平台下开源的图像查看和编辑工具。 ImageMagick在处理带有畸形数据的文件时存在整数漏洞，远程攻击者可能诱使用户处理恶意文件控制用户系统。 ImageMagick的ReadDIBImage函数中存在整数溢出漏洞： 558 image-columns=unsigned long dibinfo.width ... 620 bytesperline=4image-columnsdibinfo.bitsperpixel+31/32; 621...

blacklily-sql.txt

SnIper-sa.com SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr ss nn nn nn ii pp p ee rr rr s nn nn nn ii pp p ee rr r ss nn nn nn ii ppppppp ee rr rr sssss nn nn nn ii pp eeeeee rrrr ss nn nn nn ii pp ee rrrr s nn nn nn ii pp ee rr rr ss nn nnn ii pp ee rr rr sssss nn nnn ii pp eeeeeeeeee rr rr VerY-SecR...

ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability

ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-054.html September 24, 2007 -- CVE ID: CVE-2007-4880 -- Affected Vendor: IBM -- Affected Products: Tivoli Storage Manager Express backup clients Tivoli Stora...

ImageMagick blob.c文件单字节缓冲区溢出漏洞

BUGTRAQ ID: 25766 CVECAN ID: CVE-2007-4987 ImageMagick是一款Unix/Linux平台下开源的图像查看和编辑工具。 ImageMagick在处理畸形格式的文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户打开处理恶意文件控制系统。 magick/blob.c文件中的ReadBlobString函数存在缓冲区溢出漏洞： 3110 for i=0; i long MaxTextExtent; i++ 3111 3112 p=ReadBlobStreamimage,1,buffer,&count; ... 3119...

HP-UX PHNE_35729 : HP-UX Running ARPA Transport, Local Denial of Service (DoS) (HPSBUX02205 SSRT061120 rev.1)

s700800 11.00 cumulative ARPA Transport patch : A potential security vulnerability has been identified with HP-UX running ARPA Transport. The vulnerability could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SUSE-SA:2007:043: kernel

The remote host is missing the patch for the advisory SUSE-SA:2007:043 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:043 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

Unfixed XSS vulnerability at anzwers.com.au

Security researcher www.r3t.n3t.nl, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting anzwers.com.au, which at the time of submission ranked 105744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at www.m-2.ru

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.m-2.ru, which at the time of submission ranked 213020 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is currently...

Unfixed XSS vulnerability at www.soton.university2business.co.uk

Security researcher shadowls, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.soton.university2business.co.uk, which at the time of submission ranked 6210364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...