Network Solutions Malicious Widget May Date to January

usan Wade, Dir. of PR for Network Solutions, Herndon, Virginia. 703.668.5057 || Web hosting firm NetworkSolutions confirmed on Monday that it had unwittingly served up a malicious Web site widget on customers’ inactive or “parked” Web domains, but the company said that it still didn’t know how ma...

EzineArticles.com Cross Site Scripting

SecWorm.net - Advisory http://SecWorm.net/ XSS Vulnerability in EzineArticles.com ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site...

WordPress XSS and HTML injection

============================================================ Title: WordPress XSS and HTML injection Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 12/04/2005 Severity: Medium. users can obtain cookies of other users and defacement website Affected version:...

Vulnerabilities in Informix Webdriver

Webdriver is the web interface of Informix database,I found it is vulnerable.In the common condition,webdriver is submitted with a parameter,but if you type http://victim/cgi-bin/webdriver directly, It will return a webpage which you can modify or delete database on it. Otherwise, webdriver will...

Hylafax 4.0 pl2 Faxsurvey - Remote Command Execution

source: https://www.securityfocus.com/bid/2056/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Unpatched version of Hylafax ship with an insecure script, faxsurvey, which allows remote command execution with the privileges of the web serve...