CVE-2005-1245: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

[SECURITY] New versions of cfengine fixes symlink attack

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...