IP.Board Add-on IP.Gallery 4.2.1 Cross Site Scripting

Exploit Title: IP.Board 3.3.0 Cross Site Scripting Date: 27.03.2012 Author: Sony and Flexxpoint Software Link: http://community.invisionpower.com/ Web Browser : Mozilla Firefox Blog Flexxpoint: http://flexxpoint.blogspot.com/ Blog Sony: http://st2tea.blogspot.com Site : http://insecurity.ro PoC:...

Opera < 11.62 Multiple Vulnerabilities

Binary data 800859.prm...

[MajorSecurity-SA-2012-014]Apple Safari on iOS 5.1 - Adressbar spoofing vulnerability

MajorSecurity-SA-2012-014Apple Safari on iOS 5.1 - Adressbar spoofing vulnerability Details ============= Product: Apple Mobile Safari on iOS 5.1 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.apple.com/ Advisory-Status: published Credits ============= Discovered by: David...

Validate.icq.com Cross Site Scripting

Date: 25.03.2012 Author: Sony and Flexxpoint Web Browser : Mozilla Firefox Sony Blog: http://st2tea.blogspot.com Flexxpoint Blog: http://flexxpoint.blogspot.com/ .................................................................. Good Place for XSS...

Pale Moon Web Browser v11.0 (Multi Looping) DOS

Exploit for windows platform in category dos / poc Pale Moon Multi Looping By eidelweiss function eidelweiss window.onerror=new Function"history.go0"; window.print; eidelweiss; eidelweiss; 0day.today 2018-01-02...

Chromium: Multiple vulnerabilities

Background Chromium is an open source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site usi...

Fedora Update for arora FEDORA-2011-14719

Check for the Version of arora OpenVAS Vulnerability Test Fedora Update for arora FEDORA-2011-14719 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for firefox FEDORA-2011-12243

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2011-12243 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

JVN#10745573: Janetter vulnerable to information disclosure

Janetter is a client software for using Twitter. Janetter contains an information disclosure vulnerability. Impact When a malicious page is opened with a web browser while Janetter is being used, session information used to communicate with Twitter may be disclosed. Solution Update the software...

Fedora Update for uzbl FEDORA-2012-2384

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2012-2384 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability Advisory ID: cisco-sa-20120314-asaclient Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

Kayako Fusion Help Desk Cross Site Scripting

Exploit Title: Kayako Fusion Cross Site Scripting Date: 17.03.2012 Author: Sony Software Link: http://www.kayako.com/ Version: all version Google Dorks: inurl:Base/UserRegistration/ or intitle:Powered by Kayako Fusion Help Desk Software Web Browser : Mozilla Firefox Site : http://insecurity.ro Po...

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

[SECURITY] [DSA 2433-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2433-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2012 http://www.debian.org/security/faq -...

DSA-2433-1 iceweasel - several

Bulletin has no description...

Mozilla Releases Firefox 11, Fixes Pwn2Own Bug

Mozilla has released Firefox 11 and acknowledged that the security vulnerability that a pair of researchers used in the Pwn2Own contest last week was one that the company already was aware of and working on repairing. The bug that researchers Willem Pinckaers and Vincenzo Iozzo used to compromise...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0387 Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

Critical: Red Hat Security Advisory: firefox security and bug fix update

Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

JVN#93406632: Redmine vulnerable to cross-site scripting

Redmine is a project management software. Redmine contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affecte...

Jenkins vulnerable to cross-site scripting

Overview Jenkins contains a cross-site scripting vulnerability. Jenkins is a continuous integration CI tool. Note that this vulnerability is different from JVN14791558. Minoru Sakai of SCSK Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...