Google Fixes 27 Bugs in Chrome 15

Google has fixed more than two dozen vulnerabilities in its Chrome browser and also implemented a defense against the BEAST SSL attack. The bugs fixed in the new version of Chrome include 11 high-severity flaws. As part of its bug bounty program, Google paid more than $26,000 in rewards to...

SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities

SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50063/info SilverStripe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities

Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49787/info Adobe ColdFusion is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit...

Skype for iOS "Chat Message"窗口跨站脚本执行漏洞

BUGTRAQ ID: 49697 Skype是免费的全球语音沟通软件。 Skype for iOS的 "Chat Message"窗口在过滤用户输入时存在跨站脚本执行漏洞，远程攻击者可利用此漏洞执行任意代码，窃取cookie凭证。 Skype使用本地存储的HTML文件显示聊天信息，但错误编码呼叫用户的“全称”，可使受害者在查看信息时运行特制的JS代码。 Skype ioS 3.0.1 厂商补丁： Skype ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.skype.com/...

i-Gallery 'd' Parameter Cross Site Scripting Vulnerability

i-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could allow the attacker to...

Cisco TelePresence Multiple Vulnerabilities - SOS-11-010

Sense of Security - Security Advisory - SOS-11-010 Release Date. 19-Sep-2011 Last Update. - Vendor Notification Date. 21-Feb-2011 Product. Cisco TelePresence Series Platform. Cisco Affected versions. C = TC4.1.2, MXP = F9.1 Severity Rating. Low - Medium Impact. Cookie/credential theft,...

Cisco TelePresence Cookie Theft / Impersonation / Code Execution

Cisco TelePresensce Series suffers from client-side code execution, denial of service, cookie theft, loss of confidentiality, and impersonation vulnerabilities...

phpMyAdmin多个HTML注入漏洞

BUGTRAQ ID: 49648 phpMyAdmin是一个用PHP编写的，可以通过 web 方式控制和操作 MySQL 数据库。 phpMyAdmin在实现上存在多个HTML注入安全漏洞，远程攻击者可利用这些漏洞在受影响站点的用户浏览器中执行任意脚本代码，窃取cookie凭证。 1）在联机编辑和保存后，某些行内容的输入没有正确过滤就开始使用了，可被利用在查看恶意数据时执行插入的任意HTML和脚本代码。 2）传递到表格、列和索引名称的某些输入在使用前没有正确过滤，可被利用插入任意HTML和脚本代码，然后在查看时在用户浏览器中执行。 phpMyAdmin 3.x 厂商补丁：...

phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/49729/info phpRS is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting SQL Injections

GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/49475/info GeoClassifieds Lite is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

HESK Multiple Cross Site Scripting Vulnerabilities

HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. OpenVAS Vulnerability Test $Id: gbhesk49008.nasl 7006 2017-08-25 11:51:20Z teissa $ HESK Multiple Cross Site Scripting Vulnerabilities Authors: Michael Meyer Copyright:...

CentOS Update for seamonkey CESA-2009:0257 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2009:0257 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for seamonkey CESA-2009:0257 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2009:0257 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49008/info HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

mt LinkDatenbank - 'b' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48967/info mt LinkDatenbank is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (metricDetail$type page)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Enterprise Manager vulnerable to Cross-site scripting metricDetail$type page July 26, 2011 Risk Level: Medium Affected versions: Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5 Oracle Enterprise...

Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability - Security Advisory - SOS-11-009

Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102 Patch12 build b31g-fcs verified and possibly others Severi...

Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability

No description provided by source. Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102 Patch12 build b31g-fcs...

Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability

Exploit for jsp platform in category web applications Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102...

Oracle Sun GlassFish Enterprise Server - Persistent Cross-Site Scripting

Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102 Patch12 build b31g-fcs verified and possibly others Severi...