JVN#15503729: OSQA vulnerable to cross-site scripting

OSQA is an open source question and answer system. OSQA contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Apply a patch Apply the patch according to the information provided the developer. According to the developer, this...

PHP Ticket System Beta 1 - index.php?p SQL Injection

PHP Ticket System Beta 1 - index.php?p SQL Injection Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small...

Opera Web Browser Select Object Denial Of Service Vulnerability (Mac OS X)

The host is installed with Opera Web Browser and is prone to select object denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperaselectdosvulnmacosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Opera Web Browser Select Object Denial Of Service Vulnerability Mac OS X Authors: Madhuri ...

LynxHD <= v1.0 beta Xss Vulnerability

Exploit for php platform in category web applications Exploit Title: LynxHD alertdocument.cookie \ http://site.com/downloads/index.php/index.php/"alertDz Mafia \ Remote File upload vulnerability on the same version : http://www.1337day.com/exploits/18024 by L3b-r1'z...

Snort 2 DCE/RPC Preprocessor Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...

Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...

Stable and Beta Channel Updates

The Chrome Stable and Beta channels have been updated to 18.0.1025.151 on Windows, Mac, Linux and Chrome Frame. This release fixes issues including: black screen on Hybrid Graphics system with GPU accelerated compositing enabled Issue: 117371 CSS not applied to element Issue: 114667 Regression...

WebPortal CMS Beta Arbitrary File Upload

In The Name Of GOD ============================================================================== WebPortal CMS BETA fckeditor Arbitrary File Upload Vulnerability ============================================================================== » Title : WebPortal CMS BETA fckeditor Arbitrary File...

Minify 2.1.x - 'g' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52672/info Minify is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

CVE-2012-1388

Unspecified vulnerability in the XiXunTianTian com.xixun.tiantian application 0.6.2 beta for Android has unknown impact and attack vectors...

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released

UniOFuzz 0.1.2-beta - Universal fuzzing tool Released UniOFuzz version 0.1.2-beta - the universal fuzzing tool for browsers, web services, files, programs and network services/ports released by nullsecurity team. Video Demonstration: pigtail23, Developer of UniOFuzz demonstrated the tool in above...

Google Fixes Three High-Priority Bugs in Chrome

Google has released a new version of its Chrome browser, fixing just a small handful of vulnerabilities in the process. All three of the bugs fixed in Chrome were rated high. The release by Google is a pretty small one by the company’s standards. Often, new versions of Chrome will include fixes f...

Trojan/Backdoor Detection - BACKDOOR SatansBackdoor.2.0.Beta

Binary data 6219.prm...

Microsoft Unveils New Windows Defender Offline Tool

Microsoft has released a beta version of a new tool that can help victims of malware attacks recover from ugly infections, even if they don’t have the ability to reach the Internet. The Windows Defender Offline tool enables users to clean their systems of malware from a CD or other removable medi...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...

Acunetix Web Vulnerability Scanner 8 BETA Released

Acunetix Web Vulnerability Scanner 8 BETA Released The next stage in the evolution of Acunetix Web Vulnerability Scanner has arrived — WVS 8 BETA! Many of you have been biting their nails in anticipation of this Beta, so sit tight and read on for the next most important stage in the evolution of...

Apple To Fix iPad 2 Smart Cover Flaw with iOS 5.0.1

Apple will fix an iPad 2 security flaw with the upcoming 5.0.1 build of its iOS operating system, it’s been reported. The fix should solve a problem publicized last month with the device’s locking feature that could’ve let someone access the iPad by bypassing its Smart Cover. According to...

CVE-2010-5007

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

CVE-2010-5007

CVE-2010-5007 describes a reflected cross-site scripting (XSS) vulnerability in UTStats Beta 4 and earlier, exploitable through the mid parameter in pages/match_report.php. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSSv2 base score of 4.3 (Me...