PT-2013-3384

Name of the Vulnerable Software and Affected Versions Creative Theme versions prior to 7.x-1.2 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML. The...

CVE-2013-1780: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons...

PT-2013-3388

Name of the Vulnerable Software and Affected Versions Responsive Blog Theme versions 7.x-1.x before 7.x-1.6 Description The issue allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons. This is a cross-sit...

CVE-2013-1778: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons...

PT-2013-3386

Name of the Vulnerable Software and Affected Versions Best Responsive Theme versions 7.x-1.x before 7.x-1.1 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the administer themes permission to inject arbitrary web script or...

CVE-2013-1782: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons...

CVE-2012-2065

Cross-site scripting XSS vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2065

Cross-site scripting XSS vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2065

Cross-site scripting XSS vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3779

Name of the Vulnerable Software and Affected Versions Drupal Language Icons module versions 6.x-2.x before 6.x-2.1 Drupal Language Icons module versions 7.x-1.x before 7.x-1.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with administer languages...

CVE-2012-2065: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2065

The CVE affects the Drupal Language Icons module: versions 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 are vulnerable due to unsanitized user-supplied data, enabling XSS by remote authenticated users with administer languages permissions. Mitigation: upgrade to Language icons 6.x-2.1 (Drupa...

SA-CONTRIB-2012-039 - Language Icons - Cross Site Scripting (XSS)

CVE: CVE-2012-2065 The Language icons module adds icons to language links generated by the Locale and Content Translation modules in core. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This vulnerability is...

pidgin instant messenger DoS

Memory exhaustion on GIF icons parsing...

Security fix for the ALT Linux 5 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Security fix for the ALT Linux 6 package pidgin version 2.9.0-alt1

June 28, 2011 Alexey Shabalin 2.9.0-alt1 - 2.9.0 fixed CVE-2011-2485: remote denial of service from corrupt buddy icons - enable evolution plugin...

Fiddler v2.3.3.3 New version released !

Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended usi...

openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

MYBB 1.6 (admin/index.php) XSS Vulnerabilities

Exploit for php platform in category web applications ============================================== MYBB 1.6 admin/index.php XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...