Stable Channel Update

The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux. Security Fixes and Rewards This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page fo...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6655)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

CVE-2008-6655

Multiple cross-site scripting XSS vulnerabilities in GEDCOMTOMYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the 1 nombranche and 2 nom parameters to php/prenom.php; the 3 nombranche parameter to php/index.php; and the 4 nombranche, 5 nom, and 6 prenom parameters to...

CVE-2008-6655

Multiple cross-site scripting XSS vulnerabilities in GEDCOMTOMYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the 1 nombranche and 2 nom parameters to php/prenom.php; the 3 nombranche parameter to php/index.php; and the 4 nombranche, 5 nom, and 6 prenom parameters to...

CVE-2008-6655

CVE-2008-6655 concerns multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2. The issue enables remote attackers to inject arbitrary script/HTML via parameters in php/prenom.php (nom_branche, nom), php/index.php (nom_branche), and php/info.php (nom_branche, nom, prenom). Root c...

CVE-2008-6655

creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31730 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31731 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31732...

CVE-2007-6655

The provided sources identify CVE-2007-6655 as a PHP remote file inclusion vulnerability in Kontakt Formular 1.4. The flaw affects the includes/function.php component, allowing an attacker to supply a URL via the root_path parameter to execute arbitrary PHP code on the server. The vulnerability i...

CVE-2006-6655

NetBSD procfs vulnerability (CVE-2006-6655): Local users can trigger a kernel panic by reading /emul/linux/proc/0/stat on a procfs mounted with mount_procfs -o linux. A NULL pointer dereference occurs in affected kernels (NetBSD-current before 20061023; NetBSD 3.0/3.0.1 before 20061024; NetBSD 2....