Mozilla Foundation Security Advisory 2009-53

Mozilla Foundation Security Advisory 2009-53 Title: Local downloaded file tampering Impact: Low Announced: October 27, 2009 Reporter: Jeremy Brown Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Jeremy Brown reported that the file naming scheme used for...

CodeIgniter Global XSS Filtering Bypass Vulnerability

======================================== CodeIgniter Global XSS Filtering Bypass Vulnerability ======================================== Discovered by: Aung Khant, YGN Ethical Hacker Group, Myanmar http://yehg.net/ believe in full disclosure Product : CodeIgniter http://www.codeigniter.com Product...

TFTPD32 2.50 - Arbitrary File Download/Upload

source: https://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files with trojaned copies, used to open...