security flaw

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service crash via unspecified vectors that trigger memory corruption...

Vulnerabilities in Yandex.Server

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальном поисковике Яndex.Server. Уязвимости в параметрах query и within в главном скрипте. XSS: http://site/search/?query=223E3Cscript3Ealertdocument.cookie3C/script3E...

Vulnerability in AltaVista local search engine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в поисковике AltaVista local search engine. Уязвимость в параметре text в главном скрипте. XSS: http://site/?text=3Cscript3Ealertdocument.cookie3C/script3E О данной уязвимости я писал в рамках моего проекта Month of...

Vulnerability in Google Custom Search Engine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в локальном поисковике Google Custom Search Engine. Уязвимость в параметре q в главном скрипте. XSS: http://site/search.php?q=3C2Ftitle3E3Cscript3Ealertdocument.cookie3C2Fscript3E О данной уязвимости я писал в рамка...

USN-468-1: Firefox vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-2867, CVE-2007-2868 A flaw was discovered in the form autocomplete feature. By tricking a user in...

security flaw

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code...

[Full-disclosure] IntraProgrammed Search Engines Are XSS Driven

Hi all The intra programmed search engines are XSS driven. you can look into the desired issue. http://zeroknock.blogspot.com/2007/03/intraprogrammed-search-engines-prone-to.html Regards Zeroknock http://zeroknock.metaeye.org/mlabs Full-Disclosure - We believe in it. Charter:...

[HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities

Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: SiteCatalyst Web Login Cross Site Vulrnabilities Risk: Medium Omniture, Inc aims its aperture at your Web site. The company provides Internet analytic software and services to corporate customers such as AOL...

phpBB Archive for Search Engines模块phpbb_root_path文件包含漏洞

phpBB Archive for Search Engines是phpBB中所使用的搜索模块。 phpBB Archive for Search Engines模块处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意指令。 Archive for Search Engines模块的templates/archive/archivetopic.php脚本没有正确地验证phpbbrootpath参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意PHP代码。 Mambo Power phpBB Archive for Search...

CVE-2006-5418

The CVE-2006-5418 issue affects the pbpbb archive for search engines (aka phpBBSEI) in the archive/archive_topic.php file. It is a remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL to the phpbb_root_path parameter. Context from the provid...

CVE-2006-5418

PHP remote file inclusion vulnerability in archive/archivetopic.php in pbpbb archive for search engines SearchIndexer aka phpBBSEI for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Web Site sitemap.xml File and Directory Disclosure

The Sitemap Protocol allows you to inform search engines about URLs on a website that are available for crawling. In its simplest form, a Sitemap is an XML file that lists URLs for a site. It has been discovered that many site owners are not building their Sitemaps through spidering, but by...

Multiple Computer Associates software products security vulnerabilities

Multiple buffer overflows in different network services Discovery Service, Massage Engines, Backup Server, RPC-based services...

уязвимости во многих популярных движках из за некоректной работы файловых функций языка PHP

уязвимость например имеет место быть в таких популярных форумах как phpBB и punBB, удачная эксплуатация происходит при подмене пути загрузки аватары, и загрузки аватары с PHP кодом например в EXIF заголовке. КОД: copy'1.jpg', "./dirforupload/1.php0"."/2.jpg"; или copy'1.jpg',...

securityXSS.txt

Hello, several security vendors still don't know how to filter html in their custom search engines. http://cybertrust.com/cgi-bin/htsearch?words=%3C%2Ftitle%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E http://www.pandasoftware.com/com/virusinfo/encyclopedia/results.aspx?termino=&tipoBusqueda=vi...

security flaw

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

Multiple Cube / Sauerbraten game engines vulnerabilities

Multiple buffer overflows and DoS conditions...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...

robot(s).txt exists on the Web Server

Web Servers can use a file called /robots.txt to ask search engines to ignore certain files and directories. By nature this file can not be used to protect private files from public read access. OpenVAS Vulnerability Test $Id: webserverrobot.nasl 6053 2017-05-01 09:02:51Z teissa $ Description:...

robot.txt / robots.txt exists on the Web Server (HTTP)

Web Servers can use a file called /robots.txt to ask search engines to ignore certain files and directories. By nature this file can not be used to protect private files from public read access. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced...