Squid 3.x Denial Of Service

DoS loop, 100% cpu strHdrAcptLangGetItem at errorpage.cc Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 Versions: 3.2.5, 3.2.7 This error is only triggered when squid needs to generate an error page for example backend node is not responding etc...

Code injection

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

ECShop all version SQL injection 0day-vulnerability warning-the black bar safety net

Thanks owed to the killing of the Black Box Any goods added to the shopping cart fill in your delivery address of that page, there is the region of choice flow. php? step=consignee&directshopping=1 For example, the province select Anhui Wherein the POST data as follows country=1&province=3&city=3...

Design/Logic Flaw

selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=sysassetid request, which is not properly handled during construction of an error page...

CVE-2012-4019

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

Cross site scripting

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

CVE-2012-4019

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

CVE-2009-5120

The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

Sun iPlanet Error Page Link Injection

Sun iPlanet Error Page Link Injection known about long time, but no CVE! probably because this really lame vulnerability! some security pro will say this good for social engineering and give cyberwar example! GET...

CVE-2011-3687

Multiple cross-site scripting XSS vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via 1 the txtConferenceID parameter to HostLogin.asp, 2 the txtConferenceID parameter to ParticipantLogin.asp, 3 the acp parameter to ForgotPIN.asp...

MySpace goes down because of Internal Errors, Not Hacked !

MySpace goes down because of Internal Errors, Not Hacked ! MySpace website was presented with a curious message that left many users believing that the service had been hacked. That apparently was not the case. Visitors to the social network were greeted by a largely blank page topped with the...

Huwshimi.com's Fail Ninja

It’s always so easy to blame the ninjas, isn’t it? Still, we’ve gotta give props to the anime-inspired custom 404 error page for this Sydney, Australia based Web design firm, which claims that “A ninja stole this page.” Visitors are encouraged to “return when the moon has friends and the fox is...

Chrome's Fail Folder

There’s something very retro about the “fail folder,” Google’s go-to image, which pops up on the Chrome Web browser every time you, say, lose your Internet connection. It’s colorless and two dimensional and its size and shape not so subtly recall the beloved GUI of early vintage Macs. Google made...

AOL Lifestream's Fail Bunny

The thing about the Twitter Fail Whale was that it was just so darned festive looking that you could hardly find it in yourself to be angry at Twitter for crashing yet again. AOL seems to be playing up the “we’re too cute to be mad at” angle big time for Lifestream, a social network aggregation...

CVE-2011-0315

Cross-site scripting XSS vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an...

CVE-2011-0315

Cross-site scripting XSS vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an...