CVE-2012-0144

Cross-site scripting XSS vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability...

CVE-2012-0017

Cross-site scripting XSS vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."...

CVE-2012-0017

CVE-2012-0017 is an XSS in Microsoft SharePoint Foundation 2010 Gold/SP1 via inplview.aspx. The underlying issue is improper handling of JavaScript sequences in a URL, allowing remote attackers to inject arbitrary script/HTML. Affected product/version: SharePoint Foundation 2010 (Gold/SP1). Docum...

FreeBSD Ports: zabbix-frontend

The remote host is missing an update to the system as announced in the referenced advisory. VID 048c77df-3211-11e1-9583-14dae938ec40 OpenVAS Vulnerability Test $ Description: Auto generated from VID 048c77df-3211-11e1-9583-14dae938ec40 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID fe1976c2-5317-11e1-9e99-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID fe1976c2-5317-11e1-9e99-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability

-------------------------------------------------------------------------------------------------- CVE-2011-4367: Apache MyFaces information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: MyFaces Core 2.0.1 to 2.0.11 MyFaces Core 2.1.0 to...

Mozilla Foundation Security Advisory 2012-06

Mozilla Foundation Security Advisory 2012-06 Title: Uninitialized memory appended when encoding icon images may cause information disclosure Impact: High Announced: January 31, 2012 Reporter: Tim Abraldes Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey...

Mozilla Foundation Security Advisory 2012-04

Mozilla Foundation Security Advisory 2012-04 Title: Child nodes from nsDOMAttribute still accessible after removal of nodes Impact: Critical Announced: January 31, 2012 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Firefox 3.6.26 Thunderbird 10.0 Thunderbir...

Mozilla Foundation Security Advisory 2012-02

Mozilla Foundation Security Advisory 2012-02 Title: Overly permissive IPv6 literal syntax Impact: Low Announced: January 31, 2012 Reporter: Gregory Fleischer Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.26 Thunderbird 7.0 Thunderbird 3.1.18 SeaMonkey 2.4 Description...

Mozilla Foundation Security Advisory 2012-02

Mozilla Foundation Security Advisory 2012-02 Title: Overly permissive IPv6 literal syntax Impact: Low Announced: January 31, 2012 Reporter: Gregory Fleischer Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.26 Thunderbird 7.0 Thunderbird 3.1.18 SeaMonkey 2.4 Description...

Mozilla Foundation Security Advisory 2012-09

Mozilla Foundation Security Advisory 2012-09 Title: Firefox Recovery Key.html is saved with unsafe permission Impact: Moderate Announced: January 31, 2012 Reporter: magicant starmen Products: Firefox, SeaMonkey Fixed in: Firefox 10.0 SeaMonkey 2.7 Description magicant starmen reported that if a...

Ubuntu Update for linux-lts-backport-oneiric USN-1342-1

Ubuntu Update for Linux kernel vulnerabilities USN-1342-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13421.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-oneiric USN-1342-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Slideshow: Ten Tips For Protecting Your Devices From Seizure By U.S. Customs

VIEW SLIDESHOW Ten Tips For Protecting Your Devices From Seizure By U.S. Customs Fourth amendment be damned. With U.S. Customs agents increasingly interested in the contents of digital devices like iPhones, iPads and laptops, The Electronic Frontier Foundation has issued guidance for getting your...

Apache Tomcat Large Number Denial Of Service

No description provided by source. CVE-2012-0022 Apache Tomcat Denial of Service Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.22 - Tomcat 6.0.0 to 6.0.33 - Tomcat 5.5.0 to 5.5.34 - Earlier, unsupported versions may also be affected Descriptio...

Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability

Microsoft Windows 7 Professional 64-bit is prone to memory corruption vulnerability. This NVT has been replaced by NVT secpodms12-008.nasl OID:1.3.6.1.4.1.25623.1.0.902810. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysmemcorruptionvuln.nasl 5342 2017-02-18 17:02:54Z cfi $ Microsoft Windo...

Mozilla Releases Firefox 9 and 3.6.25

The Mozilla Foundation has released Firefox 9 and Firefox 3.6.25 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or perform a cross-site scripting attack. US-CERT encourages users and administrators t...

Apache Struts会话篡改安全绕过漏洞

Bugtraq ID: 50940 Apache Struts是一款建立Java web应用程序的开放源代码架构 Apache Struts存在安全漏洞，允许恶意用户绕过部分安全限制。 org.apache.struts2.interceptor.SessionAware或org.apache.struts2.interceptor.RequestAware接口没有正确阻止对会话映射的访问，可被利用向使用组合自动绑定接口的应用程序发送特制请求，可更改会话映射 Apache Software Foundation Struts 2.1.8 .1 Apache Software...

YourPersonalWebServer

YOPS Your Own Personal WEB Server is a small SEDA-like HTTP ToDo: Add Reverse ToDo: Test Vulnerable Targets Exploit Pack - Hawk Eye Edition 3.3 Copyright 2014 Juan Sacco http://exploitpack.com This program is free software: you can redistribute it and/or modify it under the terms of the GNU Gener...

GivingFirst Launches online Charity Processing Service

In the spirit of the Holiday Season, Coalfire has made a significant contribution to GivingFirst.org in the form of free Penetration Testing services. GivingFirst is a Denver-based community foundation whose mission is "to improve quality of life by increasing community generosity and involvement...