CVE-2011-3660

CVE-2011-3660 concernsMozilla Firefox 4.x–8.0, Thunderbird 5.0–8.0, and SeaMonkey before 2.6, where multiple vulnerabilities in the browser engine enable remote denial of service or possibly arbitrary code execution via vectors that trigger a compartment mismatch in nsDOMMessageEvent::GetData and...

CVE-2011-3658

The CVE-2011-3658 issue affects Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5, where the SVG implementation mishandles DOMAttrModified interactions, leading to out-of-bounds memory access when removing SVG elements. This can enable a remote attacker to cause a denial of service or poten...

CVE-2011-3666

Based on the Connected documents, CVE-2011-3666 is tied to Mozilla Firefox and Thunderbird on Mac OS X where a fix for CVE-2011-2372 was incorrectly applied, allowing a user-assisted bypass related to executable handling of .jar-like files via crafted web content. The Nessus/OpenSSH-related advis...

CVE-2011-3663

CVE-2011-3663 affects Mozilla Firefox 4.x–8.0, Thunderbird 5.0–8.0, and SeaMonkey before 2.6. It allows remote attackers to capture keystrokes entered on a web page via SVG animation accessKey events, even when JavaScript is disabled. The description in the provided documents states the affected ...

CVE-2011-3665

CVE-2011-3665 affects Mozilla Firefox (4.x–8.0), Thunderbird (5.0–8.0), and SeaMonkey before 2.6. The issue is an improper handling of an Ogg VIDEO element after scaling, which can cause a crash or potentially other impact. Connected advisories corroborate MFSA2011-58 and related fixes across ope...

[SECURITY] [DSA 2368-1] lighttpd security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2368-1 [email protected] http://www.debian.org/security/ Nico Golde Dec 20th, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2381-] lighttpd security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2368-1 [email protected] http://www.debian.org/security/ Nico Golde Dec 20th, 2011 http://www.debian.org/security/faq -...

Unfixed Redirect vulnerability at www.traveldaily.com.au

Security researcher p0pc0rn, has submitted on 21/12/2011 a Redirect vulnerability affecting www.traveldaily.com.au, which at the time of submission ranked 887480 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixe...

Plone and Zope - Remote Command Execution

Plone and Zope - Remote Command Execution Exploit Title: Plone - Remote Command Execution Date: 12/21/2011 Author: Nick Miles www.npenetrable.com Tested on: 12/21/2011 CVE : CVE-2011-3587 Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zo...

Unfixed XSS vulnerability at www.daystarweb.com

Security researcher IrIsT.Ir, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting www.daystarweb.com, which at the time of submission ranked 887818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

Plone and Zope - Remote Command Execution

Exploit Title: Plone - Remote Command Execution Date: 12/21/2011 Author: Nick Miles www.npenetrable.com Tested on: 12/21/2011 CVE : CVE-2011-3587 Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Versions Not Affected: Versions...

Infoproject Business Hero - Multiple Vulnerabilities

Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first software on the Macedonian market that will help you...

Unfixed Redirect vulnerability at www.yes123.com.tw

Security researcher p0pc0rn, has submitted on 21/12/2011 a Redirect vulnerability affecting www.yes123.com.tw, which at the time of submission ranked 18928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed. If...

CVE-2011-5149

creationtimestamp| type| source ---|---|--- 2011-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18261...

PuTTY Password Local Information Disclosure

The remote host has an installation of PuTTY between 0.59 and 0.61, inclusive. Such versions are known to contain an information disclosure issue, where PuTTY neglects to wipe passwords from memory that it no longer requires. Note that to exploit this vulnerability, a malicious, local process mus...

RHEL 5 : tomcat5 (RHSA-2011:1845)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1845 advisory. - tomcat: file permission bypass flaw CVE-2010-3718 - tomcat: XSS vulnerability in HTML Manager interface CVE-2011-0013 - tomcat: Multiple...

Kaspersky Internet Security/Anti-Virus - '.cfg' File Memory Corruption

source: https://www.securityfocus.com/bid/51161/info Kaspersky Internet Security and Anti-Virus are prone to a local memory-corruption vulnerability. A local attacker can exploit this issue to cause the affected application to crash, denying service to legitimate users. Due to the nature of this...

Unfixed XSS vulnerability at www.lutte-ouvriere.org

Security researcher Atmon3r, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting www.lutte-ouvriere.org, which at the time of submission ranked 550954 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

CVE-2011-5150

creationtimestamp| type| source ---|---|--- 2011-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18261...

Plone / Zope Remote Command Execution

Exploit Title: Plone - Remote Command Execution Date: 12/21/2011 Author: Nick Miles www.npenetrable.com Tested on: 12/21/2011 CVE : CVE-2011-3587 Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Versions Not Affected: Versions...