CVE-2008-3048

Unspecified vulnerability in the PDF Generator 2 pdfgenerator2 extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

Unfixed XSS vulnerability at www.poemhunter.com

Security researcher skathgh420, has submitted on 29/06/2008 a cross-site-scripting XSS vulnerability affecting www.poemhunter.com, which at the time of submission ranked 6625 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2848

Cross-site scripting XSS vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.magnus.de

Security researcher kInGoFcHaOs, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.magnus.de, which at the time of submission ranked 18981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Unfixed XSS vulnerability at kritiker.se

Security researcher bycasper41, has submitted on 06/07/2008 a cross-site-scripting XSS vulnerability affecting kritiker.se, which at the time of submission ranked 456297 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currentl...

CVE-2008-2420

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists CRL, which allows remote attackers to bypass intended access restrictions by using revoked certificates...

CVE-2008-2420

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists CRL, which allows remote attackers to bypass intended access restrictions by using revoked certificates...

Race condition

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to 1 execute code in parallel or 2 exploit a race condition to obtain "re-ordered access to the descriptor table."...

CVE-2008-1669

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to 1 execute code in parallel or 2 exploit a race condition to obtain "re-ordered access to the descriptor table."...

CVE-2008-1669

Summary: CVE-2008-1669 affects the Linux kernel and arises from inadequate protection for fcntl in 2.6.x kernels prior to 2.6.25.2. The issue enables local users to (1) execute code in parallel and (2) trigger a race that can give re-ordered access to the descriptor table. Evidence in connected a...

maiancart-xss.txt

---------------------------------------------------------------- Script : Maian Cart v1.1 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...

Manage Watchers shows users with no permission

We have just upgraded to Jira 3.12.2 and like the new functionality when adding watchers to an issue. There is one problem with this though. It is showing all users, including users with no permissions. This means that all employees that stopped working here will show in the drop down. We do not...

Unfixed XSS vulnerability at www.zum.de

Security researcher kInGoFcHaOs, has submitted on 28/04/2008 a cross-site-scripting XSS vulnerability affecting www.zum.de, which at the time of submission ranked 15344 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is currently...

Vulnerabilities in WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality и Weak Password уязвимостях в WordPress. Abuse of Functionality: В WordPress имеется возможность определения логинов в системе. Уязвимость заключается в том, что при введении верного и неверного логина при неверном пароле...

Unfixed XSS vulnerability at www.stampwants.com

Security researcher KrepTOr, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.stampwants.com, which at the time of submission ranked 221099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Unfixed XSS vulnerability at www.pro-koeln-online.de

Security researcher Hanno Boeck, has submitted on 20/03/2008 a cross-site-scripting XSS vulnerability affecting www.pro-koeln-online.de, which at the time of submission ranked 1636511 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/03/2008. ...

CVE-2008-1076

Cross-site scripting XSS vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...