Unfixed XSS vulnerability at stores.musictoday.com

Security researcher Genocide, has submitted on 22/05/2008 a cross-site-scripting XSS vulnerability affecting stores.musictoday.com, which at the time of submission ranked 7320 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is...

Unfixed XSS vulnerability at www.dagenshoroskop.nu

Security researcher Uber0n, has submitted on 19/05/2008 a cross-site-scripting XSS vulnerability affecting www.dagenshoroskop.nu, which at the time of submission ranked 1075080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It is...

Unfixed XSS vulnerability at www.magdeburg.de

Security researcher TurKPoweR, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.magdeburg.de, which at the time of submission ranked 118522 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...

Unfixed XSS vulnerability at www.macitynet.it

Security researcher s3rg3770, has submitted on 16/05/2008 a cross-site-scripting XSS vulnerability affecting www.macitynet.it, which at the time of submission ranked 11777 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is...

Unfixed XSS vulnerability at secure.aahanet.org

Security researcher C1c4Tr1Z, has submitted on 13/05/2008 a cross-site-scripting XSS vulnerability affecting secure.aahanet.org, which at the time of submission ranked 610069 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2008. It is...

CVE-2008-2105

emailin.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the From e-mail header. NOTE...

Unfixed XSS vulnerability at www.hager.fr

Security researcher xylitol, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.hager.fr, which at the time of submission ranked 417813 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/05/2008. It is currently...

Unfixed XSS vulnerability at www.monsterpayscash.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.monsterpayscash.com, which at the time of submission ranked 323686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

Unfixed XSS vulnerability at rklm.chatapat.com

Security researcher TreX, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting rklm.chatapat.com, which at the time of submission ranked 45758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is currently...

Unfixed XSS vulnerability at www.sphere.com

Security researcher TreX, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.sphere.com, which at the time of submission ranked 41821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

Buffer overflow

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

CVE-2008-1718

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

CVE-2008-1718

Buffer overflow in mimesr.dll in Autonomy formerly Verity KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail MIME attachment...

Unfixed XSS vulnerability at www.411asp.net

Security researcher Fugitif, has submitted on 04/07/2008 a cross-site-scripting XSS vulnerability affecting www.411asp.net, which at the time of submission ranked 87549 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currently...

Unfixed XSS vulnerability at filext.com

Security researcher Uber0n, has submitted on 19/03/2008 a cross-site-scripting XSS vulnerability affecting filext.com, which at the time of submission ranked 6087 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is currently...

CVE-2008-1330

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker...

Unfixed XSS vulnerability at extrafreeweb.info

Security researcher F3nix, has submitted on 15/03/2008 a cross-site-scripting XSS vulnerability affecting extrafreeweb.info, which at the time of submission ranked 1676988 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/03/2008. It is...

Dovecot IMAP 1.0.10 <= 1.1rc2 Remote Email Disclosure Exploit

No description provided by source. lame Dovecot IMAP 1.0.10 - 1.1rc3 Exploit Here's an exploit for the recent TAB vulnerability in Dovecot. It's nothing special since in the wild there are few to none targets because of the special option which has to be set. see CVE Entry CVE-2008-1218 Exploit...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...