RHEL 3 / 4 / 5 : libvorbis (RHSA-2007:0845)

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that...

iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Denial of Service Vulnerabilities

Multiple Vendor ImageMagick Multiple Denial of Service Vulnerabilities iDefense Security Advisory 09.19.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 19, 2007 I. BACKGROUND ImageMagick is a suite of image manipulation tools animate, composite, conjure, convert, display, identify,...

Unfixed XSS vulnerability at www.itsitio.com

Security researcher www.nullcode.com.ar, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.itsitio.com, which at the time of submission ranked 436100 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. I...

CVE-2007-5041

CVE-2007-5041 : G DATA InternetSecurity 2007 reportedly does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, enabling local users to trigger a crash (DoS) and potentially gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSD...

CVE-2007-5038

CVE-2007-5038 affects Bugzilla WebService: offer_account_by_email in User.pm does not validate the createemailregexp parameter, permitting remote creation of accounts that would be denied by the email regexp. Affected versions are Bugzilla before 3.0.2 and 3.1.x before 3.1.2. Exploitation would b...

CVE-2007-5042

Outpost Firewall Pro 4.0.1025.7828 is affected by CVE-2007-5042, where the driver does not properly validate parameters to SSDT function handlers, enabling a local user to crash the system and potentially gain privileges via kernel SSDT hooks (NtCreateKey, NtDeleteFile, NtLoadDriver, NtOpenProces...

CVE-2007-5046

CVE-2007-5046 describes a cross-site scripting (XSS) flaw in the Webmail interface of IceWarp Merak Mail Server prior to 9.0.0. The vulnerability allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an element attribute within an email message body, demonstrated by an o...

Unfixed XSS vulnerability at www.resourcesandtrust.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.resourcesandtrust.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.mrbilgi.com

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.mrbilgi.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...

Unfixed XSS vulnerability at www17.searchfun.co.kr

Security researcher BackDoor, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting www17.searchfun.co.kr, which at the time of submission ranked 40153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at pl.boincstats.com

Security researcher kusomiso.com, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting pl.boincstats.com, which at the time of submission ranked 34577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Fixed XSS vulnerability at de.wesellcd.dk

Security researcher Uber0n, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting de.wesellcd.dk, which at the time of submission ranked 126040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

Fixed XSS vulnerability at nl.wesellcd.dk

Security researcher Uber0n, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting nl.wesellcd.dk, which at the time of submission ranked 126040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability

No description provided by source. SnIper-sa.com SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr ss nn nn nn ii pp p ee rr rr s nn nn nn ii pp p ee rr r ss nn nn...

EasyMail MessagePrinter Object - 'emprint.dll 6.0.1.0' Remote Buffer Overflow

pwnin'... //add su one, user: sun pass: tzu shellcode =...

Unfixed XSS vulnerability at www.faith-go.co.jp

Security researcher kusomiso.com, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting www.faith-go.co.jp, which at the time of submission ranked 52293 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at fr.boincstats.com

Security researcher kusomiso.com, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting fr.boincstats.com, which at the time of submission ranked 34577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at link.tool.ms

Security researcher kusomiso.com, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting link.tool.ms, which at the time of submission ranked 90345 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at 2churl.net

Security researcher kusomiso.com, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting 2churl.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...

Unfixed XSS vulnerability at dot-it.com

Security researcher BackDoor, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting dot-it.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently unfixe...