ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

Then the explosion hzhost6. 5 virtual host management system SQL injection vulnerability-vulnerability warning-the black bar safety net

This continued explosion hzhost6. 5 virtual host management systemSQL injectionvulnerabilities. Speak only two points. First, how to get site administrator privileges. Second, how to backup Trojan. This is not a simple injection point, but after the safety function of the filtration of the point...

Unfixed Frame Redirect vulnerability at www.merkleinc.com

Security researcher skathgh420, has submitted on 01/05/2009 a Frame Redirect vulnerability affecting www.merkleinc.com, which at the time of submission ranked 421128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.caminoasantiago.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.caminoasantiago.com, which at the time of submission ranked 2170590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.metal-inside.de

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.metal-inside.de, which at the time of submission ranked 1953577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.stevewinwood.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.stevewinwood.com, which at the time of submission ranked 824478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.farosdelmundo.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.farosdelmundo.com, which at the time of submission ranked 2943121 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.stureplan.se

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.stureplan.se, which at the time of submission ranked 33875 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.tazehaa.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.tazehaa.com, which at the time of submission ranked 178074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.vsp.com.br

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.vsp.com.br, which at the time of submission ranked 897671 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed. ...

Unfixed Frame Redirect vulnerability at www.mmtclimited.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.mmtclimited.com, which at the time of submission ranked 679246 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.simon.com

Security researcher zimy, has submitted on 17/12/2008 a Frame Redirect vulnerability affecting www.simon.com, which at the time of submission ranked 12968 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed. If y...

Fast Forward can allow cross-site scripting

If a link that uses a JavaScript URL triggers Opera's Fast Forward feature, when the user activates Fast Forward, the script should run on the current page. When a page is held in a frame, the script is incorrectly executed on the outermost page, not the page where the URL was located. This can b...

Sites can change framed content on other sites – Opera Security Advisories

Sites can change framed content on other sites – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Problem Description Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be...

Fast Forward can allow cross-site scripting – Opera Security Advisories

Fast Forward can allow cross-site scripting – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Platforms All desktop versions Problem Description If a link that uses a JavaScript URL triggers Opera’s Fast Forward feature, when the user activates Fast Forward, the...

CVE-2008-5563

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service device crash via a malformed Extensible Authentication Protocol EAP frame...

[Backports-security-announce] Security Update for xen-3

Frederik Schüler uploaded new packages for xen-3 which fixed the following security problems: CVE-2008-0928, Debian Bug 469649, 469654, 469662, 469666 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges t...

CVE-2008-5563: Undefined Security Weakness

Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service device crash via a malformed Extensible Authentication Protocol EAP frame...

DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame. Aruba Advisory ID: AID-12808 Revision: 1.0 For Public Release on 12/8/2008 +----------------------------------------------------...

Unfixed Frame Redirect vulnerability at www.unobserver.com

Security researcher jeff, has submitted on 12/06/2008 a Frame Redirect vulnerability affecting www.unobserver.com, which at the time of submission ranked 1170137 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently unfixe...