Microsoft Internet Explorer CVE-2010-3348 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access content from a browser window in another domain or security zone. This may...

Microsoft Internet Explorer Uninitialized Object CVE-2010-3340 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Au...

PHP TopSites 2.1 - '/rate.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/45389/info PHP TopSites is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script code in t...

Multiple XSS in Solarwinds Orion NPM 10.1

Values placed in the URI of the browser are rendered correctly. Orion NPM 10.1 has just been released, so there is no known fix available as of yet. Examples: Most "variable=" that I've checked are vulnerable:...

BizDir 05.10 - f_srch Cross-Site Scripting

BizDir 05.10 - fsrch Cross-Site Scripting source: https://www.securityfocus.com/bid/45342/info BizDir is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Mozilla FirefoxThunderbirdSeaMonkey - Multiple HTML Injection Vulnerabilities

Mozilla FirefoxThunderbirdSeaMonkey - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/45353/info Mozilla Firefox, SeaMonkey, and Thunderbird are prone to multiple HTML-injection vulnerabilities. Successful exploits will allow attacker-supplied HTML and script cod...

Zimplit CMS - English_manual_version_2.php?client Cross-Site Scripting

Zimplit CMS - Englishmanualversion2.php?client Cross-Site Scripting source: https://www.securityfocus.com/bid/45252/info Zimplit CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities

Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45160/info Contenido CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

FTC Pushes "Do Not Track" Option For Web Browsers

The Federal Trade Commission introduced a framework today that aims to address privacy issues raised by consumers that directly affects how our activity is tracked online. The agency went on to advocate the creation of a “Do Not Track” mechanism that could help shape the future of browser securit...

2) Set Web browsers to "stun"

Cyber criminals know that Web browsers are like mothers: everybody’s got one. They also know that if you’re shopping online, you’re using your Web browser to do it. That’s why Web based attacks are one of the most popular kind avenue of compromise and online. The good news is that most modern Web...

WonderCMS 'page' Parameter Cross Site Scripting And Information Disclosure Vulnerabilities

WonderCMS is prone to a cross-site scripting vulnerability and an information- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser...

Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

Microsoft Forefront Unified Access Gateway Mobile Portal Cross-Site Scripting Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Microsoft Forefront Unified Access Gateway 'Signurl.asp' Cross-Site Scripting Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

pfSense - 'pkg.php?xml' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info pfSense is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

IBM Tivoli Access Manager for E-Business - ibmwpmpop?method Cross-Site Scripting

IBM Tivoli Access Manager for E-Business - ibmwpmpop?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

IBM Tivoli Access Manager for E-Business - ibmwpmos?method Cross-Site Scripting

IBM Tivoli Access Manager for E-Business - ibmwpmos?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

IBM Tivoli Access Manager for E-Business - '/ibm/wpm/domain?method' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...

IBM Tivoli Access Manager for E-Business - ibmwpmgso?method Cross-Site Scripting

IBM Tivoli Access Manager for E-Business - ibmwpmgso?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

IBM Tivoli Access Manager for E-Business - '/ibm/wpm/acl?method' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...