SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

Unfixed XSS vulnerability at www.allenboard.com

Security researcher tenest, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.allenboard.com, which at the time of submission ranked 1472980 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

Debian: Security Advisory (DSA-711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

ID-Commerce Security Advisory - SLR-2007-001 +------------------------------------------------------------------------+ | Product | ID-Commerce | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerabilities |...

Unfixed XSS vulnerability at www.dha.com.tr

Security researcher st@rext, has submitted on 23/12/2007 a cross-site-scripting XSS vulnerability affecting www.dha.com.tr, which at the time of submission ranked 346185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

Unfixed XSS vulnerability at fog.adsv.jp

Security researcher kusomiso.com, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting fog.adsv.jp, which at the time of submission ranked 1015401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Upgraded Thunderbird 1.5.0.13 missing fix for MFSA 2007-23 — Mozilla

Mozilla tester Stephen Donner reported that only users who installed Thunderbird 1.5.0.13 using the install package received the fix for MFSA 2007-23. Users who upgraded to Thunderbird 1.5.0.13 from an earlier version using the automatic update mechanism were not protected. If those users browsed...

Unfixed XSS vulnerability at www.der-dirigent.de

Security researcher bate, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.der-dirigent.de, which at the time of submission ranked 384238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at lycos.wausau.oodle.com

Security researcher CCC, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting lycos.wausau.oodle.com, which at the time of submission ranked 15048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.ojotop.com

Security researcher WHK, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.ojotop.com, which at the time of submission ranked 2075693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Unfixed XSS vulnerability at www.bpashop.co.uk

Security researcher koolkeith12345, has submitted on 20/11/2007 a cross-site-scripting XSS vulnerability affecting www.bpashop.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...

Moderate: net-snmp security update

5.0.9-2.30E.23 - fix bulkwalk security flaw 366591...

Unfixed XSS vulnerability at www.moviepink.net

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.moviepink.net, which at the time of submission ranked 12784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

GLSA-200710-23 : Star: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200710-23 Star: Directory traversal vulnerability Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the hasdotdot function which does not identify //.. slash slash dot dot sequences in...

oracle10g-sql.txt

// / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov / / email: [email protected]...

Oracle 10g - CTX_DOC.MARKUP SQL Injection

Oracle 10g - CTXDOC.MARKUP SQL Injection // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr"...

Oracle 10g - 'CTX_DOC.MARKUP' SQL Injection

// / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov / / email: [email protected]...

Solaris 9 (x86) : 114265-23

SunOS 5.9x86: in.dhcpd libresolv and BIND. Date this patch was last updated by Sun : Jul/21/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 5.9 (x86) : 116649-23

Web Server 6.1: Sun ONE Web Server 6.1x86 Patch WS61SP11. Date this patch was last updated by Sun : May/29/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security i...

Solaris 5.8 (x86) : 116649-23

Web Server 6.1: Sun ONE Web Server 6.1x86 Patch WS61SP11. Date this patch was last updated by Sun : May/29/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security i...