Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access

Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and...

Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

Walla TeleSite 3.0 - ts.cgi File Existence Enumeration

Walla TeleSite 3.0 - ts.cgi File Existence Enumeration source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path...

Walla TeleSite 3.0 - 'ts.exe?sug' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...

lynx security update

CentOS Errata and Security Advisory CESA-2005:839 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was fou...

Critical: Red Hat Security Advisory: lynx security update

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx "lynxcgi:" URI handler. An attacker...

Opera web browser address bar spoofing weakness

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript 'unOnload' event handler when the brows...

Opera web browser news url denial of service vulnerability

The remote host is using Opera - an alternative web browser. This version reportedly occurs when processing a 'news:' URL of excessive length, that may result in a denial of service. It has been reported that this issue will trigger a condition that will prevent Opera from functioning until the...

Opera web browser news url denial of service vulnerability

The remote host is using Opera - an alternative web browser. This version reportedly occurs when processing a SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Opera skin zip file buffer overflow vulnerability

The remote host is using Opera - an alternative web browser. This version is vulnerable to a security weakness. A problem has been identified in the handling of zipped skin files by Opera. Because of this, it may be possible for an attacker to gain unauthorized access to a system using the...

CuteNews index.php XSS

The version of CuteNews installed on the remote host is vulnerable to a cross-site-scripting XSS attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Opera skin zip file buffer overflow vulnerability

The remote host is using Opera - an alternative web browser. This version is vulnerable to a security weakness. A problem has been identified in the handling of zipped skin files by Opera. Because of this, it may be possible for an attacker to gain unauthorized access to a system using the...

Opera web browser address bar spoofing weakness (2)

The remote host contains a web browser that is vulnerable to address bar spoofing attacks. Description : The remote host is using Opera, an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It ...

Goollery < 0.04b Multiple XSS Vulnerabilities - Active Check

Goollery is prone to multiple cross-site-scripting XSS vulnerabilities eg. through the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Opera web browser address bar spoofing weakness

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript SPDX-FileCopyrightText: 2004 David...

Opera remote location object cross-domain scripting vulnerability

The remote host contains a web browser that is affected by multiple flaws. Description : The remote host is using Opera, an alternative web browser. This version of Opera on the remote host fails to block write access to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might...

Opera web browser large javaScript array handling vulnerability

The remote host is using Opera - an alternative web browser. This version is vulnerable to an issue when handling large JavaScript arrays. In particular, it is possible to crash the browser when performing various operations on Array objects with 99999999999999999999999 or 0x23000000 elements. Th...

Opera web browser file download extension spoofing

The remote host is using Opera - an alternative web browser. This version contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious web site provides a file for download, but crafts the filename in such a way that the fil...

Mozilla/Firefox default installation file permission flaw

The remote host is using Mozilla and/or Firefox, an alternative web browser. The remote version of this software is prone to an improper file permission setting. This flaw only exists if the browser is installed by the Mozilla Foundation package management, thus this alert might be a false...

Mozilla/Firefox user interface spoofing

The remote host is using Mozilla and/or Firefox, an alternative web browser. This web browser supports the XUL XML User Interface Language, a language designed to manipulate the user interface of the browser itself. Since XUL gives the full control of the browser GUI to the visited websites, an...