Horde 3.3.5 - PHP_SELF Cross-Site Scripting

Horde 3.3.5 - PHPSELF Cross-Site Scripting ============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date: October 13th, 2009 - Last revised: December 16th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3701 - Severity: 6.3/10 CVSS Bas...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

[DSECRG-09-010] Oracle 10g CTXSYS.DRVXTABC - plsql injection

Digital Security Research Group DSecRG Advisory DSECRG-09-010 http://dsecrg.com/pages/vul/show.php?id=110 Application: Oracle Database 10G Versions Affected: Oracle 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 29.01.2008 Vend...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...

Joomla! Component Jshop - SQL Injection

/ Joomla Component comjshop SQL Injection Vulnerability Author : Don Tukulesto [email protected] Homepage : http://www.indonesiancoder.com Date : October 23, 2009 Tune In : http://antisecradio.fm choose your weapon / + Dork : inurl:"kaMtiEz"+"tukulesto" + Price : FREE Open Source Content...

Joomla Photo Blog SQL Injection

/ Joomla Component comphotoblog SQL injection vulnerability - category Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 12, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://webguerilla.net/ + Download :...

Joomla! Component Jshop - SQL Injection

Joomla! Component Jshop - SQL Injection / Joomla Component comjshop SQL Injection Vulnerability Author : Don Tukulesto [email protected] Homepage : http://www.indonesiancoder.com Date : October 23, 2009 Tune In : http://antisecradio.fm choose your weapon / + Dork :...

Joomla JShop SQL Injection

/ Joomla Component comjshop SQL Injection Vulnerability Author : Don Tukulesto [email protected] Homepage : http://www.indonesiancoder.com Date : October 23, 2009 Tune In : http://antisecradio.fm choose your weapon / + Dork : inurl:"kaMtiEz"+"tukulesto" + Price : FREE Open Source Content...

Joomla Component com_photoblog SQL injection vulnerability - (category)

No description provided by source. / Joomla Component comphotoblog SQL injection vulnerability - category Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 12, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Joomla JD-WordPress Vulnerability File Inclusion Version 2.0 RC2

REGISTER GLOBALS ON wp-feed.php?mosConfigabsolutepath= Version 2.0 RC2 UPDATE IT ! !/usr/bin/perl + Author : Don Tukulesto [email protected] + Date : October 20, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : www.joomladeveloping.org + version : 2.0 RC2 + Method : Remote File...

Oracle Releases Critical Patch Update

Oracle has released its Critical Patch Update for October 2009 to address 38 vulnerabilities across several database and server products. The update contains the following security fixes: 16 for the Oracle Database 3 for the Oracle Application Server 8 for the Oracle E-Business Suite and...

Security | Oracle Critical Patch Update - October 2009

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

Joomla JD-WordPress 2.0 RC2 remote file icnlusion

Exploit for unknown platform in category web applications ================================================= Joomla JD-WordPress 2.0 RC2 remote file icnlusion ================================================= !/usr/bin/perl + Author : Don Tukulesto + Date : October 20, 2009 + Homepage :...

Joomla! Plugin JD-WordPress 2.0 RC2 - Remote File Inclusion

!/usr/bin/perl + Author : Don Tukulesto [email protected] + Date : October 20, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : www.joomladeveloping.org + version : 2.0 RC2 + Method : Remote File Inclusion + Dork : "Kill-9"+"IndonesianCoder" + Location : INDONESIA Notes : Jika...

CVE-2009-3459

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtaine...

MS09-062: Description of the security update for Microsoft Report Viewer 2008 Service Pack 1 Redistributable Package: October 13, 2009

None None...

Simple Directory Listing Cross Site Scripting

Security Advisory : Cross-Site Scripting flaw in Simple Directory Listing Discovered by == Amol Naik amolnaik4atgmaildotcom Overview -------------- Quote from from http://simpledirectorylisting.net/ : "Simple Directory Listing is a single file php script which functions as directory listing in an...

Joomla Soundset 1.0 SQL Injection

/ Joomla Component comsoundset Remote SQL injection vulnerability - catid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 4, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.soundset.at/ + Download :...

redcat media - SQL Injection

redcat media - SQL Injection x==========================================x | AntiSecuritydotorg | x==========================================x x==========================================x | Title : redcat media inurl:index.php?contentId= SQL Injection Vulnerability | Vendor :...

redcat media SQL Injection

Exploit for unknown platform in category web applications ========================== redcat media SQL Injection ========================== | Title : redcat media inurl:index.php?contentId= SQL Injection Vulnerability | Vendor : http://www.redcatmedia.co.uk/ | Date : 2 oktober 2009 Indonesia |...