CVE-2012-0448

Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user accounts, which makes it easier for remote authenticated users to spoof other user accounts by...

seamonkey security update

CentOS Errata and Security Advisory CESA-2012:0084 Updated seamonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Unfixed XSS vulnerability at www.sernin-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.sernin-immobilier.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Joomla Rule Local File Inclusion

Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Outside In. Authentication is not required to exploit this vulnerability. The flaw exists within the sccfut.dll component which is used by multiple vendors, most notably the Novell Groupwise...

[SECURITY] Fedora 16 Update: zabbix-1.8.10-1.fc16

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

CVE-2011-3667

The User.offeraccountbyemail WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle usercancreateaccount settings, which allows remote attackers to...

Unfixed XSS vulnerability at spicylemonvoortalent.nl

Security researcher DutchFlower, has submitted on 30/12/2011 a cross-site-scripting XSS vulnerability affecting spicylemonvoortalent.nl, which at the time of submission ranked 2484473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. ...

Unfixed XSS vulnerability at www.raidcall.com.tw

Security researcher a3q, has submitted on 29/12/2011 a cross-site-scripting XSS vulnerability affecting www.raidcall.com.tw, which at the time of submission ranked 49630 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/12/2011. It is currentl...

Hastymail rs parameter command injection

Added: 12/28/2011 CVE: CVE-2011-4542 BID: 50791 OSVDB: 77331 Background Hastymail is a fast, secure, rfc-compliant, cross-platform IMAP/SMTP client application written in PHP providing a clean web interface for sending and reading E-mail. Problem Hastymail2 fails to properly sanitize user-supplie...

Unfixed XSS vulnerability at www.vokrugsveta.ru

Security researcher Atmon3r, has submitted on 17/12/2011 a cross-site-scripting XSS vulnerability affecting www.vokrugsveta.ru, which at the time of submission ranked 29109 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

CVE-2011-4760

Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by...

[SECURITY] Fedora 16 Update: zabbix-1.8.9-1.fc16

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

Anonymous Finland Wages War on Mining, Leaks 500,000 E-mails

The Finnish arm of the Hacktivist collective Anonymous announced their intent to wage a war against domestic mining company Talvivaara over the weekend, according to a press release posted to the Pastebin file sharing Web site on Saturday. In what Anonymous has deemed “Operation Screw Talvivaara,...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 12...

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver

IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 12...

CVE-2011-4172

Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...