Fedora 7 : perl-5.8.8-29.fc7 (2008-3399)

Tue Apr 29 2008 Marcela Maslanova - 4:5.8.8-29 - CVE-2008-1927 buffer overflow, when unicode character is used. - Thu Jan 31 2008 Tom 'spot' Callaway - 4:5.8.8-28 - create /usr/lib/perl5/vendorperl/5.8.8/auto and own it in base perl resolves bugzilla 214580 - Mon Nov 26 2007 Tom 'spot' Callaway -...

Unfixed XSS vulnerability at www.hancockfabrics.com

Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.hancockfabrics.com, which at the time of submission ranked 77503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is...

Unfixed XSS vulnerability at www.fredericks.com

Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.fredericks.com, which at the time of submission ranked 11503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/05/2008. It is...

Unfixed XSS vulnerability at infox.lcna.org

Security researcher ProgenTR, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting infox.lcna.org, which at the time of submission ranked 4147405 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is...

Unfixed XSS vulnerability at www.thecrimelife.net

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.thecrimelife.net, which at the time of submission ranked 1044565 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Unfixed XSS vulnerability at 2452thegameunleashed.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting 2452thegameunleashed.com, which at the time of submission ranked 1506343 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Unfixed XSS vulnerability at crooklife.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting crooklife.com, which at the time of submission ranked 20513734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is currently...

Unfixed XSS vulnerability at www.cmtv.com.ar

Security researcher www.nullcode.com.ar, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.cmtv.com.ar, which at the time of submission ranked 63835 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/04/2008. It...

CVE-2008-2040

creationtimestamp| type| source ---|---|--- 2008-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31713...

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o .text:1000737B .text:1000737B thisptr = dword ptr 4 .text:1000737B...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

Unfixed XSS vulnerability at www.digitalnet.eti.br

Security researcher mygotmanoel, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.digitalnet.eti.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/03/2008. It is...

Unfixed XSS vulnerability at www.dqscert.com

Security researcher DerickTham, has submitted on 29/12/2007 a cross-site-scripting XSS vulnerability affecting www.dqscert.com, which at the time of submission ranked 941580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...

Fedora 7 : autofs-5.0.1-29 (2007-4469)

Thu Dec 13 2007 Ian Kent - 5.0.1-29 - Bug 421351: CVE-2007-5964 autofs defaults don't restrict suid in /net f7 - use mount option 'nosuid' for '-hosts' map unless 'suid' is explicily specified. - Wed Sep 5 2007 Ian Kent - 5.0.1-28 - add ldaps support required by schema discovery. - add back LDAP...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4811)

This update brings Mozilla Thunderbird to security update version 2.0.0.9 Following security problems were fixed : - MFSA 2007-29: Crashes with evidence of memory corruption As part of the Firefox 2.0.0.8 update releases Mozilla developers fixed many bugs to improve the stability of the product...

AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SQL Injection issue in cdrpgsql |...

Unfixed XSS vulnerability at www.illegal-rap.com

Security researcher CCC, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.illegal-rap.com, which at the time of submission ranked 7302367 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/11/2007. It is...

Unfixed XSS vulnerability at www.abooo.net

Security researcher kusomiso.com, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.abooo.net, which at the time of submission ranked 2440449 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.neagenia.gr

Security researcher St@R-gaZ3r, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.neagenia.gr, which at the time of submission ranked 435413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.namedrive.com

Security researcher WHK, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.namedrive.com, which at the time of submission ranked 6867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...