U.S. Dept Of Defense: Video player on ███ allows arbitrary remote videos to be played

Summary: A Flash video player hosted on ███████ can be provided with an arbitrary remote XML file via the url query string parameter. Description: The Flash video player http://█████/shared/widgets/popup.asp uses the url query string parameter as an address to fetch an RSS feed type XML document...

Unfixed XSS vulnerability at super.balsas.lt

Security researcher F3nix, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting super.balsas.lt, which at the time of submission ranked 19403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...