Unfixed XSS vulnerability at sslsites.de

Security researcher Hanno Boeck, has submitted on 03/12/2007 a cross-site-scripting XSS vulnerability affecting sslsites.de, which at the time of submission ranked 119867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is current...

Unfixed XSS vulnerability at www.usedcartrader.co.uk

Security researcher INull, has submitted on 03/08/2007 a cross-site-scripting XSS vulnerability affecting www.usedcartrader.co.uk, which at the time of submission ranked 125476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Integer overflow

Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line...

CVE-2006-5877

Removed by vendor...

Unfixed XSS vulnerability at www.dreamsmagazine.net

Security researcher St@rExT, has submitted on 23/02/2007 a cross-site-scripting XSS vulnerability affecting www.dreamsmagazine.net, which at the time of submission ranked 1447192 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/02/2007. It is...

Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Executio

Microsoft Security Advisory 933052 Vulnerability in Microsoft Word Could Allow Remote Code Execution Published: February 14, 2007 Microsoft is investigating new public reports of very limited, targeted attacks against Microsoft Word “zero-day” using a vulnerability in Microsoft Office 2000 and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

CVE-2007-0651

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

CVE-2007-0651

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

Unfixed XSS vulnerability at www.programlama.com

Security researcher DarkToxic, has submitted on 13/02/2007 a cross-site-scripting XSS vulnerability affecting www.programlama.com, which at the time of submission ranked 78403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2007. It is...

Unfixed XSS vulnerability at www.tr.cx

Security researcher THE-SH0CK-B0Y, has submitted on 02/05/2007 a cross-site-scripting XSS vulnerability affecting www.tr.cx, which at the time of submission ranked 20330 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/05/2007. It is currentl...

Microsoft Security Advisory (932114) Vulnerability in Microsoft Word 2000 Could Allow Remote Code Execution

Microsoft Security Advisory 932114 Vulnerability in Microsoft Word 2000 Could Allow Remote Code Execution Published: January 26, 2007 Microsoft is investigating new public reports of limited “zero-day” attacks using a vulnerability in Microsoft Word 2000. In order for this attack to be carried ou...

[Full-disclosure] Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability

Title: ------------------- Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability Vendor Contacted: ------------------- now-ish. Background Info: ------------------- Earthlink TotalAccess Download Site: http://www.earthlink.net/software/free/totalaccess/highspeed/ Description:...

CVE-2006-6940

Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA pop2owa 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message...

Design/Logic Flaw

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...

DoceboLMS Xss Vuln.

Bhhgroup.org & Trtekforum.com script name : MaviPortal tr Version : All script Download: http://www.docebo.org/doceboCms/index.php?mn=docs&op=download&pi=54&id=44 script sites : http://www.docebo.org Risk : High Found By : St@rExT Vulnerable file : arama.asp Xss Vuln:...

maviportal-xss.txt

Bhhgroup.org & Trtekforum.com script name : MaviPortal tr Version : All script Download: http://www.docebo.org/doceboCms/index.php?mn=docs&op=download&pi=54&id=44 script sites : http://www.docebo.org Risk : High Found By : St@rExT Vulnerable file : arama.asp Xss Vuln:...

x-news 1.1 - 'users.txt' Remote Password Disclosure

x-news 1.1 Password Disclosure Vulnerability Affected Software: x-news 1.1 x-news Website: http://xqus.com Bugfounder: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, ajann +Exploit: http://target/xnewspath/news/db/users.txt Showexample:...

NetMail IMAP APPEND command buffer overflow

Added: 12/29/2006 CVE: CVE-2006-6425 BID: 21723 OSVDB: 31362 Background Novell NetMail is an e-mail and calendaring server application. Problem A buffer overflow in the NetMail IMAP service allows remote, authenticated attackers to execute arbitrary commands by sending a long, specially crafted...

CVE-2006-6702

The connected Nessus entry for Atmail Webmail identifies CVE-2006-6702 as a cross-site scripting (XSS) flaw in Global.pm affecting Atmail Webmail 4.x prior to 4.6.1 (4.61). The vulnerability arises from an input‑validation error in Global.pm that could allow arbitrary web script or HTML to be inj...