SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

Apple iPhone Safari浏览器tel: URI处理拒绝服务漏洞

BUGTRAQ ID: 36386 CVE ID: CVE-2009-3271 iPhone是苹果发布的智能手机。 iPhone OS中内嵌的Safari浏览器在处理网页IFRAME元素SRC属性中的超长tel: URL时可能会崩溃。 Apple iPhone OS 3.0.1 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com Apple Safari Iphone Crash using tel: Found by cloud :...

Cross site scripting

Cross-site scripting XSS vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter...

PaoBacheca 2.1 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || PaoBacheca 2.1 Remote URI XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://zenas.org Greetings : Mizoz, Zuka, str0ke,...

PaoLink 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Pao-Link V.1.0 Remote URI XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://zenas.org Greetings : Mizoz, Zuka, str0ke,...

nginx proxy server memory corruption

Memory corruption on HTTP request URI...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

Cross site scripting

Cross-site scripting XSS vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI...

CVE-2009-3162

Cross-site scripting XSS vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI...

CVE-2009-3162

Cross-site scripting XSS vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI...

Orca Browser 'javascript:' And 'data:' URI XSS Vulnerability

Orca Browser Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Maxthon Address Bar Spoofing Vulnerability

Maxthon Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Maxthon Address Bar Spoofing Vulnerability

This host is installed with Maxthon Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmaxthonaddrbarspoofingvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Maxthon Address Bar Spoofing Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

QtWeb 'javascript:' And 'data:' URI XSS Vulnerability

QtWeb Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products 'javascript:' URI XSS Vulnerability (Sep 2009) - Linux

Mozilla Products are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products 'javascript:' URI XSS Vulnerability (Sep 2009) - Windows

Mozilla Products are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 'data:' URI XSS Vulnerability (Sep 2009) - Linux

Mozilla Firefox is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox 'data:' URI XSS Vulnerability - Sep09 (Windows)

This host is installed with Mozilla Products and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxdataurixssvulnsep09win.nasl 6530 2017-07-05 06:23:50Z cfischer $ Mozilla Firefox 'data:' URI XSS Vulnerability - Sep09 Windows Authors: Sharath S Copyright:...

Mozilla Product(s) 'javascript:' URI XSS Vulnerability - Sep09 (Windows)

This host is installed with Mozilla Products and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsjsurixssvulnsep09win.nasl 6468 2017-06-28 14:05:02Z cfischer $ Mozilla Products 'javascript:' URI XSS Vulnerability - Sep09 Windows Authors: Sharath S...

MediaWiki 'IP'参数远程文件包含漏洞

BUGTRAQ: 9057 MediaWiki没有充分过滤用户提交的URI参数，远程攻击者可以利用这个漏洞包含远程服务器上的恶意文件，以WEB权限执行任意代码。 问题应该是对MediaWiki的'IP'参数缺少充分过滤，包含文件可被攻击者任意指令，如果指定远程服务器的恶意PHP文件，可导致以WEB进程权限执行。 MediaWiki-stable 20030829/20031107 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 修改php.ini配置文件，关闭'allowurlfopen'和'registerglobals'选项。 厂商补丁：...