Fixed XSS vulnerability at drug-clomid.com

Security researcher Atmon3r, has submitted on 26/02/2012 a cross-site-scripting XSS vulnerability affecting drug-clomid.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...

Gentoo Security Advisory GLSA 201110-26 (libxml2)

The remote host is missing updates announced in advisory GLSA 201110-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unfixed XSS vulnerability at search.searchcompletion.com

Security researcher Vijayendra Nigam, has submitted on 26/01/2012 a cross-site-scripting XSS vulnerability affecting search.searchcompletion.com, which at the time of submission ranked 1179 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2012-5225

creationtimestamp| type| source ---|---|--- 2012-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36632...

Unfixed XSS vulnerability at www.programme.tv

Security researcher Atmon3r, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.programme.tv, which at the time of submission ranked 7471 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currentl...

Unfixed XSS vulnerability at www.vipjatt.com

Security researcher Omega Apex, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.vipjatt.com, which at the time of submission ranked 44784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...

Unfixed XSS vulnerability at www.ladocumentationfrancaise.fr

Security researcher Atmon3r, has submitted on 26/12/2011 a cross-site-scripting XSS vulnerability affecting www.ladocumentationfrancaise.fr, which at the time of submission ranked 74466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011...

flash-plugin: critical flaws fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service browser crash via unspecified vectors, related to a "logic error issue."...

flash-plugin: critical flaws fixed in APSB11-26

Stack-based buffer overflow in the ActionScript Virtual Machine AVM component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

flash-plugin: critical flaws fixed in APSB11-26

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."...

ZDI-11-309 : Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulnerability

ZDI-11-309 : Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-309 October 26, 2011 -- CVE ID: CVE-2011-3173 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Novell -- Affected Products: Novell...

ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability

ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-307 October 26, 2011 -- CVE ID: CVE-2011-3545 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle...

Unfixed XSS vulnerability at www.gay.tv

Security researcher Trueliarx, has submitted on 26/10/2011 a cross-site-scripting XSS vulnerability affecting www.gay.tv, which at the time of submission ranked 70787 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Adobe Flash Player ActionScript Recursive StackOverflowError (APSB11-26; CVE-2011-2426)

The vulnerability is due to an error in the ActionScript Virtual Machine AVM while handling malicious Flash files. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a web-page containing specially crafted Flash files. Successful exploitation may allow an...

WordPress GD Star Rating plugin <= 1.9.10 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex"...

Adobe Flash Player URI Protocol Cross Site Scripting (ASBP11-26; CVE-2011-2429)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to differences in the way the browser and the plug-in handle URLs. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page...

Adobe Flash Player loadClip Cross Site Scripting (APSB11-26; CVE-2011-2444)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient validation of origin domains. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page...

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine The Vulnerability Assessment Team VAT at the U.S. Dept. of Energy's Argonne National Laboratory in Illinois has managed to hack a Diebold Accuvote touch-screen voting machine. Voting machines used by as many as a quarter of...

RHEL 6 : flash-plugin (RHSA-2011:1333)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1333 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...