CVE-2012-3869

CVE-2012-3869 (Redaxo XSS) : A cross-site scripting vulnerability exists in Redaxo 4.3.x and 4.4 where input passed via the subpage parameter to index.php (when page is set to user or template) is not properly sanitized, allowing remote attackers to inject arbitrary HTML/JavaScript. Exploitation ...

CVE-2010-5097

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-5097

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

boost security and bug fix update

1.33.1-15 - Fix bugs in parsing invalid regexps - Resolves: 766755 1.33.1-14 - Delete leftover .orig files after patches are successfully applied 1.33.1-13 - GCC 4.4 fixes - Resolves: 567722 1.33.1-11 - Add a fix for thread safety bug in boost::regex - Build with -fno-strict-aliasing due to the...

Memory corruption

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to 1 the...

CVE-2011-3378

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to 1 the...

APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 Apple TV Software Update 4.4 is now available and addresses the following: Apple TV Available for: Apple TV 4.0 through 4.3 Impact: An attacker with a privileged network position may intercept user...

WordPress Zotpress 4.4 SQL Injection

Exploit Title: WordPress Zotpress plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- if $mzrapiuserid == false && $mzrinclude == false && isset$GET'apiuserid' && pregmatch"/^0-9+$/", $GET'apiuserid' $mzrapiuserid = trim$GET'apiuserid';...

Anonymous leaks PSN SSH Logs, Sony is responsible for Data Theft ?

Anonymous leaks PSN SSH Logs, Sony is responsible for Data Theft ? 1. On the Sony servers running the highly outdated Open SSH version 4.4. 2. Current version is 5.7. For those of Sony for encrypted version are used for more than five years several known security holes. 3. Sony server running in...

PHP 4.4.x<4.4.9, 5.2.x<5.2.7 FastCGI Module 多句点请求拒绝服务漏洞

No description provided by source...

ManageEngine ADSelfService Plus 4.4 - 'EmployeeSearch.cc' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46331/info ManageEngine ADSelfService Plus is prone to multiple vulnerabilities, including multiple security-bypass and cross-site scripting vulnerabilities. Attackers can exploit these issues to bypass certain security restrictions and to execute arbitra...

Cross site scripting

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2010-2014

Cross-site scripting XSS vulnerability in cp/listcontent.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter...

CVE-2010-2013

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2010-2015

LiSK CMS 4.4 is affected by SQL injection vulnerabilities (CVE-2010-2015) in two server-side scripts: cp_messages.php (view_inbox via id) and edit_email.php (via id). The root cause is inadequate input sanitization of the id parameter, enabling remote attackers with CP Messages privileges to craf...

LiSK CMS 4.4 list_content.php Cross Site Scripting

Vulnerability ID: HTB22374 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinliskcms.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

Fedora 11 : slim-1.3.1-9.fc11 (2009-13551)

Tue Dec 22 2009 Lorenzo Villani - 1.3.1-9 - Fix CVE-2009-1756 bugzilla: 544024 - Fix MIT insecure cookie generation patch from Debian - Fix build with GCC 4.4 - Sat Oct 10 2009 Lorenzo Villani - 1.3.1-8 - Fix BZ 518068 - Sun Jul 26 2009 Fedora Release Engineering - 1.3.1-7 - Rebuilt for...

Fedora 12 : slim-1.3.1-9.fc12 (2009-13552)

Tue Dec 22 2009 Lorenzo Villani - 1.3.1-9 - Fix CVE-2009-1756 bugzilla: 544024 - Fix MIT insecure cookie generation patch from Debian - Fix build with GCC 4.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Linux Kernel 2.6 < 2.6.19 (White Box 4 / CentOS 4.4/4.5 / Fedora Core 4/5/6 x86) - 'ip_append_data()' Ring0 Privilege Escalation (1)

/ 0x82-CVE-2009-2698 Linux kernel 2.6 . / include include include include include include include unsigned int uid, gid; void getrootuidunsigned task unsigned addr=task; whileaddr0!=uid||addr1!=uid||addr2!=uid||addr3!=uid addr++; addr0=addr1=addr2=addr3=0; / set uids / addr4=addr5=addr6=addr7=0; ...