CVE-2009-0470

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 12.423 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 level/15/exec/-/ or 2 exec/, a different vulnerability than CVE-2008-3821...

CVE-2009-0471

Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...

Cisco XSS / XSRF Vulnerabilities

There was a Cisco Product Security Incident Response Team PSIRT advisory recently concerning some XSS/CSRF holes in the IOS.. quote Document ID: 98605 http://www.cisco.com/warp/public/707/cisco-sr-20090114-http.shtml Revision 1.0 For Public Release 2009 January 14 1600 UTC GMT Cisco Response: "Tw...

Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

Cisco IOS 12.423 - HTTP Server Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Internet Explorer 7 ClickJacking Vulnerability (2009-01-23)

Exploit for unknown platform in category remote exploits =========================================================== Internet Explorer 7 ClickJacking Vulnerability 2009-01-23 =========================================================== Application Name : Internet Explorer 7 Vulnerable Type :...

Linux/x86 - Socket-proxy Shellcode (372 bytes) (Generator)

Linux/x86 - Socket-proxy Shellcode 372 bytes Generator. Shellcode exploit for Generator platform /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected]...

Gentoo Security Advisory GLSA 200812-23 (imlib2)

The remote host is missing updates announced in advisory GLSA 200812-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2953

creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7554...

CVE-2008-6393

creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7555...

CVE-2008-5715

creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7554...

CVE-2008-5727

creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7559...

CVE-2008-6729

creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7557...

CVE-2008-5310

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7198...

Unfixed XSS vulnerability at xtremezone.ro

Security researcher moubik, has submitted on 23/11/2008 a cross-site-scripting XSS vulnerability affecting xtremezone.ro, which at the time of submission ranked 3156788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently...

CVE-2008-6115

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7195...

CVE-2008-4029

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7196...

CVE-2008-5938

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7204...

-moz-binding property bypasses security checks on codebase principals — Mozilla

Security researcher Collin Jackson reported that the -moz-binding CSS property can be used to bypass security checks which validate codebase principals. Similar to the issue reported in MFSA 2008-23, Jackson demonstrated that an attacker can replace a stylesheet in a signed JAR which uses relativ...

PHPdaily (SQL/XSS/LFD) Multiple Remote Vulnerabilities

No description provided by source. | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///|||||...