CVE-2009-0141: Incorrect Permission Assignment for Critical Resource

XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to emailrecipe.aspx, 2 id parameter to recipedetail.aspx, and the 3 catid parameter to validatefieldlength.aspx...

CVE-2008-6056

Multiple cross-site scripting XSS vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to emailrecipe.aspx, 2 id parameter to recipedetail.aspx, and the 3 catid parameter to validatefieldlength.aspx...

CVE-2008-6056

World Recipe 2.11 is affected by multiple cross-site scripting (XSS) vulnerabilities. Specifically, remote attackers can inject arbitrary web script or HTML through: (1) the n parameter to emailrecipe.aspx, (2) the id parameter to recipedetail.aspx, and (3) the catid parameter to validatefieldlen...

CVE-2008-6056: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to emailrecipe.aspx, 2 id parameter to recipedetail.aspx, and the 3 catid parameter to validatefieldlength.aspx...

FreeBSD : perl -- Directory Permissions Race Condition (4a99d61c-f23a-11dd-9f55-0030843d3802)

Secunia reports : Paul Szabo has reported a vulnerability in Perl File::Path::rmtree, which potentially can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a race condition in the way File::Path::rmtree handles directory permissions when...

System: insecure config file permissions

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

CVE-2008-2367

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

CVE-2008-2367

CVE-2008-2367 affects Red Hat Certificate System 7.2. The root cause is insecure default file permissions on configuration files (e.g., password.conf) allowing local attackers to read sensitive credentials. Connected advisories note remediation via updated packages for Red Hat Certificate System ...

CVE-2008-2367

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

dovecot: ssl_key_password disclosure due to an insecure dovecot.conf permissions

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

CVE-2008-2367: Undefined Security Weakness

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

System: insecure config file permissions

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

World Association of Newspapers SQL Injection Exploit

!/usr/bin/python This was written for educational purpose only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! !!! Special thanx for d3hydr8 and rsauron who inspired me !!! . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / //...

Gentoo Security Advisory GLSA 200812-16 (dovecot)

The remote host is missing updates announced in advisory GLSA 200812-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CUPS 1.3.8-4 - Local Privilege Escalation

CUPS 1.3.8-4 - Local Privilege Escalation / cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local use...

Wordl Recipe 2.11 Cross Site Scripting

Armorize Technologies Security Advisory Armorize-ADV-2008-0001 Title: Multiple XSS Vulnerabilities in World Recipe 2.11 Date: 2008/12/15 Status: Full Class: Input Validation Error Bugtraq ID: N/A Category: Cross Site Scripting Language: ASP.NET C Description Armorize-ADV-2008-0001 discloses...

Multiple XSS Vulnerabilities in World Recipe 2.11

Armorize Technologies Security Advisory Armorize-ADV-2008-0001 Title: Multiple XSS Vulnerabilities in World Recipe 2.11 Date: 2008/12/15 Status: Full Class: Input Validation Error Bugtraq ID: N/A Category: Cross Site Scripting Language: ASP.NET C Description Armorize-ADV-2008-0001 discloses...

openSUSE 10 Security Update : valgrind (valgrind-5809)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there CVE-2008-4865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

世界之窗(The World)浏览器地址栏欺骗漏洞

No description provided by source. +++++++++++++++++++++++++++++++++++++++++ 新打开的链接，地址栏是http://www.baidu.com 内容却是被人恶意控制的 Baidu function win x=window.open'http://www.baidu.com'; x.location="about:Baidu要过冬了其实80sec说了也不算数了......document.title="Hacked By 80sec"";...