[SECURITY] Fedora 11 Update: evolution-rss-0.1.4-3.fc11

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 11 Update: blam-1.8.5-14.fc11

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 10 Update: blam-1.8.5-14.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 10 Update: evolution-rss-0.1.4-3.fc10

This is an evolution plugin which enables evolution to read rss feeds...

IBM Lotus Notes RSS阅读器HTML注入漏洞

BUGTRAQ ID: 36305 Lotus Notes是由IBM开发的集成邮件、日历、即时消息、浏览器和业务协作应用，可用作Lotus Domino服务器应用的桌面客户端。 Lotus Notes提供了一些可由用户选择添加和启用的小工具，其中一个工具是RSS阅读器。这个阅读器下载RSS文件、获取其中的项并本地保存为HTML文件。由于本地保存的文件在Internet Explorer中是以本地Intranet区运行的，因此在解释和显示RSS项时会导致以提升的权限运行其中注入的脚本。 IBM Lotus Notes 8.5 厂商补丁： IBM ---...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Linux)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Linux Authors: Antu Sanadi Copyright:...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (Windows)

This host has IBM Lotus Notes installed and is prone to HTML Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodibmlotusnoteshtmlinjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability Windows Authors: Antu Sanadi Copyright:...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Windows

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability - Linux

IBM Lotus Notes is prone to a HTML Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K...

CVE-2009-3114

IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability (CVE-2009-3114) affects Lotus Notes 8.0/8.5 RSS reader widget. The flaw causes local HTML documents to be saved from RSS items, enabling remote attackers to execute arbitrary script in Internet Explorer’s Local Machine Zone via a craf...

[scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation scip AG Vulnerability ID 4021 09/08/2009 http://www.scip.ch/?vuldb.4021 I. INTRODUCTION Lotus Notes is a client-server, collaborative application developed and sold by IBM Software Group. More information is available on the official product web...

IBM Lotus Notes 8.5 RSS Widget crossite scripting

Scripting in local host zone is possible...

Auction RSS Content Script 3.0 XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Auction RSS Content Script V3.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.jce-tech.com/auction.php...

Auction RSS Content Script - search.php?id Cross-Site Scripting

Auction RSS Content Script - search.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/44267/info JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverag...

Safari RSS feed:// buffer overflow Exp code-vulnerability warning-the black bar safety net

Safari RSS feed:// buffer overflow Exp code Copy the contents to the clipboard the program code !/ usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2 0 0 9-0 5-1 2 ala CVE-2 0 0 8-3 5 2 9 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.c...

Total Calendar 2.4 SQL Injection / LFI

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || TotalCalendar 2.4 bSQL/LFI Multiples Remote Vulnerability Discovered By : Moudi Contact : Download :...

Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44267/info JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...