Gentoo Security Advisory GLSA 200411-30 (pdftohtml)

The remote host is missing updates announced in advisory GLSA 200411-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS in RSS feed creation

URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...

openSUSE 10 Security Update : seamonkey (seamonkey-5600)

SeaMonkey was updated to version 1.1.11. Problems fixed in the 1.1.11 update: CVE-2008-2785 MFSA 2008-34: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla's internal CSSValue array data structure. The vulnerability was caused by an...

Unfixed XSS vulnerability at www.wyeastlab.com

Security researcher SaMTHG, has submitted on 30/08/2008 a cross-site-scripting XSS vulnerability affecting www.wyeastlab.com, which at the time of submission ranked 1195159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is...

Unfixed XSS vulnerability at www.demirmedya.net

Security researcher JoCk3r, has submitted on 30/08/2008 a cross-site-scripting XSS vulnerability affecting www.demirmedya.net, which at the time of submission ranked 1002381 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is...

CVE-2008-4082

creationtimestamp| type| source ---|---|--- 2008-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6332...

CVE-2008-3672

creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6169...

CVE-2008-3404

creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32128...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5411)

Mozilla Firefox was updated to version 2.0.0.15, fixing various bugs including following security bugs : CVE-2008-2798 CVE-2008-2799 MFSA-2008-21: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

Efestech Shop 2.0 - cat_id SQL Injection

Efestech Shop 2.0 - catid SQL Injection Title: Efestech Shop v2.0 Sql Ä°njection Vuln ============================== ================================== + Author : Dr.Kacak + Special Thankz : KnockOut And All My Friends + System 0VerfL0WerZ Group & BuqX Team + Mail : BuqX at Hotmail dot com...

CVE-2008-3133

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5971...

CVE-2008-3033

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32003...

CVE-2008-2952

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32000...

CVE-2008-2943

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31999...

CVE-2007-1899

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5975...

Unfixed XSS vulnerability at www.adanahaber.com

Security researcher SeYMeN, has submitted on 30/05/2008 a cross-site-scripting XSS vulnerability affecting www.adanahaber.com, which at the time of submission ranked 392862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.librarything.com

Security researcher Futility, has submitted on 30/05/2008 a cross-site-scripting XSS vulnerability affecting www.librarything.com, which at the time of submission ranked 13551 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

CVE-2008-6427

creationtimestamp| type| source ---|---|--- 2008-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5698 2008-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5928...

Unfixed XSS vulnerability at www.ypass.net

Security researcher xylitol, has submitted on 30/05/2008 a cross-site-scripting XSS vulnerability affecting www.ypass.net, which at the time of submission ranked 1870242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currentl...

Unfixed XSS vulnerability at www.living-foods.com

Security researcher Mystick, has submitted on 05/12/2008 a cross-site-scripting XSS vulnerability affecting www.living-foods.com, which at the time of submission ranked 97125 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/01/2009. It is...