CVE-2005-1695

Multiple cross-site scripting XSS vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the 1 rssurl parameter to magpieslashbox.php, or the url parameter to 2 magpiesimple.php or 3 magpiedebug.php...

[SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3}

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS 0.760RC2,RC3 cXIb8O3.6 Author: Maksymilian Arciemowicz cXIb8O3 Date: 4.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

PayProCart30.txt

This is a multi-part message in MIME format. ------=NextPart000000601C5395C.BF487B20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/...

Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Http Response Splitting...

CVE-2005-0874

The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...

Multiple Trillian instant messenger buffer overflows

Multiple buffer overflow on parsing HTTP-based protocols, including RSS...

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

WebGUI < 7.5.13 RSS Feed Authentication Bypass

Binary data 4559.prm...

Add a generic HTML cleaning service

This will be able to be used by all components that need to display untrusted HTML: including HTML attachments, RSS feeds, and the html-include macro...