Unfixed XSS vulnerability at www.fredericks.com

Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.fredericks.com, which at the time of submission ranked 11503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/05/2008. It is...

Unfixed XSS vulnerability at 2452thegameunleashed.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting 2452thegameunleashed.com, which at the time of submission ranked 1506343 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Unfixed XSS vulnerability at crooklife.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting crooklife.com, which at the time of submission ranked 20513734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is currently...

CVE-2008-2040

creationtimestamp| type| source ---|---|--- 2008-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31713...

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o .text:1000737B .text:1000737B thisptr = dword ptr 4 .text:1000737B...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

Unfixed XSS vulnerability at www.digitalnet.eti.br

Security researcher mygotmanoel, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.digitalnet.eti.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/03/2008. It is...

Unfixed XSS vulnerability at www.dqscert.com

Security researcher DerickTham, has submitted on 29/12/2007 a cross-site-scripting XSS vulnerability affecting www.dqscert.com, which at the time of submission ranked 941580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...

Fedora 7 : autofs-5.0.1-29 (2007-4469)

Thu Dec 13 2007 Ian Kent - 5.0.1-29 - Bug 421351: CVE-2007-5964 autofs defaults don't restrict suid in /net f7 - use mount option 'nosuid' for '-hosts' map unless 'suid' is explicily specified. - Wed Sep 5 2007 Ian Kent - 5.0.1-28 - add ldaps support required by schema discovery. - add back LDAP...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4811)

This update brings Mozilla Thunderbird to security update version 2.0.0.9 Following security problems were fixed : - MFSA 2007-29: Crashes with evidence of memory corruption As part of the Firefox 2.0.0.8 update releases Mozilla developers fixed many bugs to improve the stability of the product...

AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...

Unfixed XSS vulnerability at www.neagenia.gr

Security researcher St@R-gaZ3r, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.neagenia.gr, which at the time of submission ranked 435413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.abooo.net

Security researcher kusomiso.com, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.abooo.net, which at the time of submission ranked 2440449 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.namedrive.com

Security researcher WHK, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.namedrive.com, which at the time of submission ranked 6867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Unfixed XSS vulnerability at www.illegal-rap.com

Security researcher CCC, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.illegal-rap.com, which at the time of submission ranked 7302367 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/11/2007. It is...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. Slackware is not vulnerable to either of these in its default configuration, but watch out if you've enabled JavaScript. More information about the security issues may be found here...

Unfixed XSS vulnerability at health.mytelus.com

Security researcher www.r3t.n3t.nl, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting health.mytelus.com, which at the time of submission ranked 11981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It i...

GLSA-200710-29 : Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-29 Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code Ulf Harnhammar from Secunia Research discovered a format string error in the incputerror function in file src/inc.c. Impact : A remote attacker could...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4574)

This update brings Mozilla Firefox to security update version 2.0.0.8 Following security problems were fixed : - MFSA 2007-26 / CVE-2007-3844: Privilege escalation through chrome-loaded about:blank windows Mozilla researcher mozbugra4 reported that a flaw was introduced by the fix for MFSA 2007-2...

Mozilla products vulnerable to memory corruption in the JavaScript engine

Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...