Unfixed XSS vulnerability at www.flashstreamworks.com

Security researcher nullbyt3, has submitted on 23/03/2011 a cross-site-scripting XSS vulnerability affecting www.flashstreamworks.com, which at the time of submission ranked 1009072 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

Open redirect

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

CVE-2010-4760

Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...

netbus-info NSE Script

Opens a connection to a NetBus server and extracts information about the host and the NetBus service itself. The extracted host information includes a list of running applications, and the hosts sound volume settings. The extracted service information includes its access control list acl, server...

Hackers Steal Customer Data from McDonald's Partner Database

McDonald's is collaborating with law enforcement after malicious hackers infiltrated another company's database and stole information about an unknown number of the fast-food chain's customers. McDonald's has alerted potentially affected customers via email and through a message on its website. "...

Unfixed XSS vulnerability at www.zebulon.fr

Security researcher warvector, has submitted on 15/06/2010 a cross-site-scripting XSS vulnerability affecting www.zebulon.fr, which at the time of submission ranked 30064 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2010. It is current...

SA-CONTRIB-2010-038 - Privatemsg - Access bypass

The Privatemsg module allows to send private messages between users. Additionally, the sub module Privatemsg Email Notification sends e-mail notification when such a message is sent. The page to configure the template for these e-mails does not use the correct access permission which allows all...

Randomised password not sent in email

When creating a user with password normally, the notification email to that new user will contain the password. However creating a new user and leave the password blank, JIRA randomly generates a password for that user, but the randomised password "is not sent" in the notification email to that...

Randomised password not sent in email

When creating a user with password normally, the notification email to that new user will contain the password. However creating a new user and leave the password blank, JIRA randomly generates a password for that user, but the randomised password "is not sent" in the notification email to that...

POP Peeper UIDL处理栈溢出漏洞

BUGTRAQ ID: 33926 POP Peeper是运行在Windows任务栏中的邮件通知程序，当接收到新邮件时会给出提示。 POP Peeper的客户端在检索邮件时存在栈溢出漏洞。当用户试图连接到用作了POP3守护程序的邮件服务器时，POP Peeper客户端会使用UIDL命令获得所要检索的每封邮件的特定ID。如果恶意服务器发送了超过1040字节的超长ID的话，就可以溢出栈上缓冲区，允许攻击者完全控制进程。 Mortal Universe Software Entertainment POP Peeper 3.4.0.0 厂商补丁： Mortal Universe Softwar...

Unfixed XSS vulnerability at www.funfon.ru

Security researcher BlueMax, has submitted on 11/08/2008 a cross-site-scripting XSS vulnerability affecting www.funfon.ru, which at the time of submission ranked 5955257 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is currentl...

Unfixed XSS vulnerability at securityoracle.patrolstore.com

Security researcher Tr0jAn, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting securityoracle.patrolstore.com, which at the time of submission ranked 574559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009...

Unfixed XSS vulnerability at www.tuningshop.ir

Security researcher IHZTEAM, has submitted on 09/10/2008 a cross-site-scripting XSS vulnerability affecting www.tuningshop.ir, which at the time of submission ranked 1088316 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/10/2008. It is...

Unfixed XSS vulnerability at inuyashastore.viz.com

Security researcher xylitol, has submitted on 13/08/2008 a cross-site-scripting XSS vulnerability affecting inuyashastore.viz.com, which at the time of submission ranked 9936 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

Unfixed XSS vulnerability at forum.finalfantasyunlimited.net

Security researcher kInGoFcHaOs, has submitted on 28/07/2008 a cross-site-scripting XSS vulnerability affecting forum.finalfantasyunlimited.net, which at the time of submission ranked 269707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at library.uncc.edu

Security researcher doublecheck, has submitted on 20/07/2008 a cross-site-scripting XSS vulnerability affecting library.uncc.edu, which at the time of submission ranked 24468 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/09/2008. It is...