DMXReady Job Listing <= 1.1 Remote Contents Change Vulnerability

Exploit for unknown platform in category web applications ================================================================ DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp :...

Script access to .documentURI and .textContent in mail — Mozilla

Mozilla developer Boris Zbarsky reported that a malicious mail message might be able to glean personal information about the recipient from the mailbox URI such as computer account name if the mail recipient has enabled JavaScript in mail. If a malicious mail is forwarded "in-line" to a recipient...

Fedora Core 4 : thunderbird-1.0.8-1.1.fc4 (2006-489)

Updated thunderbird packages that fix various bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several bugs were found in the way Thunderbird...

Squiz MySource Matrix Unauthorised Proxy and Cross Site Scripting

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Squiz - My Source and My Source Matrix http://www.squiz.net.au "MySource Matrix is the newest version of the popular MySource CMS, purpose built for enterprise level...

mozilla -- multiple vulnerabilities

A Mozilla Foundation Security Advisory reports of multiple issues. Several of which can be used to run arbitrary code with the privilege of the user running the program. MFSA 2006-56 chrome: scheme loading remote content MFSA 2006-55 Crashes with evidence of memory corruption rv:1.8.0.5 MFSA...

CentOS 4 : thunderbird (CESA-2006:0330)

Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...

USN-276-1: Thunderbird vulnerabilities

Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables. Under some rare circumstances, a malicious mail with embedded JavaScript could exploit this to execute arbitrary code with the privileges of the user. CVE-2006-0292, CVE-2006-1742 The function...

Ubuntu 5.04 / 5.10 : mozilla-thunderbird vulnerabilities (USN-276-1)

Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables. Under some rare circumstances, a malicious mail with embedded JavaScript could exploit this to execute arbitrary code with the privileges of the user. CVE-2006-0292, CVE-2006-1742 The function...

TextPortal Default Passwords

The remote host is running the TextPortal content management interface. This set of scripts come with two default administrator passwords : - admin - 12345 At least one of these two passwords is still set. An attacker could use them to edit the content of the remote website. %NASLMINLEVEL 70300...

Accessing remote/local content in IE &#40;GM#009-IE&#41;

GreyMagic Security Advisory GM009-IE ===================================== By GreyMagic Software, Israel. 23 Aug 2002. Available in HTML format at http://security.greymagic.com/adv/gm009-ie/. Topic: Accessing remote/local content in IE. Discovery date: 18 Feb 2002. Affected applications:...