Mozilla Expands Bug Bounty to Web Apps

Mozilla has decided to follow the lead of Google and expand its bug-bounty program to pay for vulnerabilities found on certain of its Web sites, including the site for Firefox and the main Mozilla site. The group said that bounties for bugs found on the eligible sites will start at $500 and could...

Geany .18 - Local File Overwrite

Geany .18 - Local File Overwrite !/bin/sh redbull.sh AKA Geany 0.18 Local File Overwrite Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 10.06.2009 I was checking out some IDEs and decided on Geany. Nice interface, good features, but it doesn't defend against...

report bug bug reporting application weak permissions

Per-user configuration file is world readable and may contain sensitive information, such as SMTP server password...

Debian DSA-477-1 : xine-ui - insecure temporary file creation

Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

PHPNUKE 6 XSS Vulnerabilities

http://www.phpnuke.org/modules.php?name=Search Enter: scriptalertdocument.cookie;/script in form, click Search. Needless to say these bugs won't go away. The vendor WOULD HAVE been contacted if they just gave an email address without having to subscribe to nukesupport/phpnuke - maybe I don't use...

RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))

Resintm serves the fastest servlets and JSP. With Java and JavaScript support, Resin gives web applications the flexibility to choose the right language for the task. Resin's leading XSL XML stylesheet language support encourages separation of content from formatting. Resin provides a fast servle...

bugzilla.txt

Advisory: Unchecked systemblaat $var blaat call in Bugzilla 2.8 Root66 - ShellOracle - b0f By - [email protected] / Introduction / Bugzilla is a database for bugs. It let's people report bugs and assigns these bugs to the appropriate developers. Developer s can use bugzilla to keep a to-do...