Crlf injection

CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notificatio...

CVE-2011-2381

CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notificatio...

CVE-2011-2381

CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notificatio...

CVE-2011-2978

Bugzilla CVE-2011-2978: The vulnerability arises because Bugzilla does not prevent changes to the confirmation email address (old_email) when a user initiates an email change, allowing an attacker with access to another user’s session (e.g., an unattended workstation) to redirect the change notif...

Unfixed XSS vulnerability at eu.alawar.com

Security researcher Cocain TeaM, has submitted on 08/09/2011 a cross-site-scripting XSS vulnerability affecting eu.alawar.com, which at the time of submission ranked 20264 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

CVE-2011-2721

Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...

CVE-2011-2721

Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...

CVE-2011-2721

CVE-2011-2721 : An off-by-one error in the cli_hm_scan function (matcher-hash.c) in libclamav, affecting ClamAV before 0.97.2. The vulnerability allows a remote attacker to cause a denial of service (daemon crash) via a crafted email during certain hash calculations. Mitigation: upgrade to clamav...

SAP NetWeaver Internet Sales-Multiple XSS - 2

Application: SAP NetWeaver Vendor URL: Bugs: XSS Risk: Medium Exploits: YES Reported: 08.04.2011 Vendor response: 10.04.2011 Patched: 13.11.2011 Date of Public Advisory: 13.03.2012 Reference: SAP Security Note 1584030 Author: Dmitriy Chastuchin ERPScan Description SAP NetWeaver Internet...

Cross site scripting

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

CVE-2011-2023

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

ZipWiz 2005 5.0 - .zip Buffer Corruption

ZipWiz 2005 5.0 - .zip Buffer Corruption !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian...

ZipGenius 6.3.2.3000 - '.zip' Local Buffer Overflow

!/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use...

Washington Post Hacked, 1.27M IDs and E-mail Addresses Stolen

Over a million user IDs and e-mail addresses of job applicants were taken from the Washington Post’s Web site after being hacked late last week, according to a statement posted on the Post’s Web site. The jobs section of the newspaper’s site was hit by two separate “brief” attacks by “an...

Anonymous Hackers target Orlando websites & #OpOrlando Press Release

Anonymous Hackers target Orlando websites & OpOrlando Press Release The next target for the hacktivist group known as Anonymous will be the city of Orlando. Anonymous has reportedly shut down the Orlando Chamber of Commerce website. In One Press Release Anonymous Call To Arms In Op Orlando...

Unfixed XSS vulnerability at obengware.com

Security researcher AR3SW0RMED, has submitted on 28/06/2011 a cross-site-scripting XSS vulnerability affecting obengware.com, which at the time of submission ranked 229754 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

CVE-2011-0207

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

Design/Logic Flaw

The MobileMe component in Apple Mac OS X before 10.6.8 uses a cleartext HTTP session for the Mail application to read e-mail aliases, which allows remote attackers to obtain potentially sensitive alias information by sniffing the network...

Ubuntu 11.04 : thunderbird vulnerabilities (USN-1122-2)

USN-1122-1 fixed vulnerabilities in Thunderbird for Lucid and Maverick. This update provides the corresponding fixes for Natty. It was discovered that there was a vulnerability in the memory handling of certain types of content. An attacker could exploit this to possibly run arbitrary code as the...

Ubuntu 11.04 : thunderbird regression (USN-1122-3)

USN-1122-2 fixed vulnerabilities in Thunderbird on Ubuntu 11.04. A regression was introduced which caused Thunderbird to display an empty menu bar. This update fixes the problem. We apologize for the inconvenience. It was discovered that there was a vulnerability in the memory handling of certain...