The 5 Most Important Patches of 2009

Computerworld polled a panel of patch and vulnerability experts to find the five security fixes everyone should deploy from the last 12 months. If you roll out any updates from 2009, these are the ones. Read the full article. Computerworld...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

CGI Generic Local File Inclusion (2nd pass)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its contents, or even execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Unfixed XSS vulnerability at www.topgunlimousine.com

Security researcher Xylitol, has submitted on 10/01/2009 a cross-site-scripting XSS vulnerability affecting www.topgunlimousine.com, which at the time of submission ranked 13958605 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It ...

Apple Safari Multiple Vulnerabilities - Aug09

This host is installed with Apple Safari Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvulnaug09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple Safari Multiple Vulnerabilities - Aug09 Authors: Nikita MR Copyright: Copyright c 2009 SecPod...

Apple Safari Multiple Vulnerabilities (Aug 2009)

Apple Safari Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Unfixed XSS vulnerability at top-bookmark.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting top-bookmark.com, which at the time of submission ranked 7516678 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Code injection

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

CVE-2009-2196

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

CVE-2009-2196

The provided data confirms CVE-2009-2196 affects Apple Safari before 4.0.3. The vulnerability is described as an unspecified issue that allows a remote web server to place an arbitrary website in Safari’s Top Sites view, potentially enabling phishing attacks via unknown vectors. Connected OpenVAS...

CVE-2009-2196

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

Safari < 4.0.3 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.3. Such versions are potentially affected by several issues : - A buffer overflow exists in the handling of EXIF metadata that ccould lead to a crash or arbitrary code execution. CVE-2009-2188 - A vulnerability in...

Safari < 4.0.3 Multiple Vulnerabilities

Binary data 5125.prm...

Top Paidmailer - 'home.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/43626/info Top Paidmailer is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code...

Top Paidmailer - home.php Remote File Inclusion

Top Paidmailer - home.php Remote File Inclusion source: https://www.securityfocus.com/bid/43626/info Top Paidmailer is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Cross site scripting

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

Top Paidmailer Remote File Inclusion

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

JNM Solutions DB Top Sites 1.0 - 'vote.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43699/info JNM Solutions DB Top Sites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

tomcat XML parser information disclosure

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted...

Directory traversal

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...