[InterN0T] LiveZilla - XSS Vulnerability

LiveZilla - Cross Site Scripting Vulnerability Version Affected: 3.1.8.3 newest Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert...

CVE-2009-3581

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

CVE-2009-3581

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

CVE-2009-3581

Multiple cross-site scripting XSS vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via 1 the DCN Description field in the Accounts Receivables menu item for Add Transaction, 2 the Description field in the Accounts Payable menu item for A...

SitioOnline SQL Injection

cvs -vrew ! SitioOnline SQL Injection Vulnerability ! Author : 4lG3r14n0-t3r0 ! MAIL : [email protected] / Software Information + Vendor : http://www.SitioOnline.cl + script : SitioOnline + Download : + Vulnerability : php SQL injection + Dork :inurl:"listaarticulos.php?idcategoria=" or Powered by...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

HealthNet Data Breach Affects 1.5 Mil Customers

Health Net Inc. announced Wednesday that it is investigating a healthcare data security breach that resulted in the loss of patient data, affecting 1.5 million customers. The healthcare provider said the lost files, a mixture of medical data, Social Security numbers and other personally...

Verizon Wireless Customers Beware of Trojan Horse

Cyber-criminals have started preying on Verizon Wireless customers, sending out spam e-mail messages that say their accounts are over the limit and offering them a “balance checker” program to review their payments. The e-mail messages, which look like they come from Verizon Wireless, are fakes;...

Internet Phone Systems Become Fraudster's Tool

Cybercriminals have found a new launching pad for their scams: the phone systems of small and medium-sized businesses across the U.S. In recent weeks, they have hacked into dozens of telephone systems across the country, using them as a way to contact unsuspecting bank customers and trick them in...

Comcast Alerts Customers to PC Infections

CNet’s Elinor Mills has the scoop on a Comcast trial of a new automated service that will warn broadband customers of possible virus infections, if the computers are behaving as if they have been compromised by malware. For instance, a significant overnight spike in traffic being sent from a...

New Security Standards for Mobile Payments Coming

From SC Magazine Angela Moscaritolo A financial services technology group is developing standards for making secure mobile payment transactions. The goal of the project, an effort of the Financial Services Technology Consortium FSTC, is to develop standards and processes so that banking customers...

Microsoft explains who gets security patches

From the Windows Security Blog Paul Cooke RSA was great last week – security was clearly top of mind for the attendees, and I fielded a number of different questions last week about how Microsoft protects our customers. Some are pretty straightforward around how the various Windows 7 security...

Mandriva Linux Security Advisory : mpg123 (MDVSA-2009:093-1)

A vulnerability has been found and corrected in mpg123 : Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negati...

ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability

ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-058 September 9, 2008 -- CVE ID: CVE-2008-3625 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection:...

ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability

ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-041 July 10, 2008 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have bee...

eSHOP100 (SUB) Remote SQL Injection Vulnerability

No description provided by source. ...:::::eSHOP100 SQL Injection Vulnerbility ::::.... AUTHOR : JuDge AUTHOR Email:[email protected],[email protected] Script WebSite:http://www.eshop100.co.uk Dork:: DescRipTiON: pull customers info from database EX...

eSHOP100 (SUB) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= eSHOP100 SUB Remote SQL Injection Vulnerability ================================================= - , .ss$$$$$$$$$$s, - $. s$$$$$$$$$$$$$$$$Ss - "$$$$$$$$$$$$$$$$$$o$$$ , -...

eSHOP100 - SUB SQL Injection

eSHOP100 - SUB SQL Injection - , .ss$$$$$$$$$$s, - $. s$$$$$$$$$$$$$$$$Ss - "$$$$$$$$$$$$$$$$$$o$$$ , - s$$$$$$$$$$$$$$$$$$$$$$$$s, ,s - s$$$$$$$$$"$$$$$$""""$$$$$$"$$$$$, - s$$$$$$$$$$s""$$$$ssssss"$$$$$$$$" - s$$$$$$$$$$' """ss"$"$s"" - s$$$$$$$$$$, """""$ .s$$s - s$$$$$$$$$$$$s,... s$$' -...

Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow

====================================================================== Secunia Research 08/04/2008 - Adobe Flash Player "Declare Function V7" Heap Overflow - ====================================================================== Table of Contents Affected...