CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

CVE-2009-1695

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page...

Mereo 1.8.0 File Disclosure

!/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo version Tested under my MS WINDOWS sp2 u...

Mereo 1.8.0 - Arbitrary File Disclosure

!/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo version Tested under my MS WINDOWS sp2 u...

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

CVE-2008-6765

CVE-2008-6765 affects ViArt Shop (aka Shopping Cart) 3.5. The vulnerability allows remote attackers to access the contents of an arbitrary shopping cart by supplying a modified cart_name parameter. The available documents do not specify impacted versions beyond 3.5, nor a concrete root cause or r...

Quick n Easy Web Server 3.3.5 - Arbitrary File Disclosure

Quick n Easy Web Server 3.3.5 - Arbitrary File Disclosure !/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All...

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

MDKA-2007:124 : openafs

This update addresses the following bugs in the openafs package: The openafs kernel module does not work on the x8664 platform, triggering a kernel oops as soon as it is loaded. The openafs package was compiled with wrong gcc 4.2 compiler optimisations which prevented it from listing directory...

Ubuntu 8.10 : samba vulnerability (USN-680-1)

It was discovered that Samba did not properly perform bounds checking in certain operations. A remote attacker could possibly exploit this to read arbitrary memory contents of the smb process, which could contain sensitive information or possibly have other impacts, such as a denial of service...

Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

Ubuntu 8.10 : OpenJDK vulnerabilities (USN-713-1)

It was discovered that Java did not correctly handle untrusted applets. If a user were tricked into running a malicious applet, a remote attacker could gain user privileges, or list directory contents. CVE-2008-5347, CVE-2008-5350 It was discovered that Kerberos authentication and RSA public key...

Design/Logic Flaw

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...

CVE-2009-1332

Summary: CVE-2009-1332 corresponds to an information-disclosure vulnerability in Sun Java System Directory Server's Online Help feature. The issue allows remote attackers to determine whether certain files or directories exist, and in some cases obtain a single line of a file, via unspecified vec...

Miniweb Source Disclosure

Miniweb webserver Source Disclousure Vulnerabilities By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P : In t3h wild... Site: http://miniweb.sourceforge.net/ Info: MiniWeb is a mini HTTP server implementation written in C language, featuring low system resour...

Mandriva Update for openafs MDVA-2008:006-1 (openafs)

Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDVA-2008:006-1 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Mandriva Update for bind MDKSA-2007:149 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDKSA-2007:149 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2009-0842

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...

Ubuntu Update for firefox vulnerabilities USN-493-1

Ubuntu Update for Linux kernel vulnerabilities USN-493-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4931.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-493-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...