Fedora 15 : tomcat6-6.0.32-8.fc15 (2011-13456)

Fix for CVE-2011-3190 This release is the first using a systemd unit file. SystemV files are packaged separately. During this transition users may experience this error: 'error reading information on service tomcat6: No such file or directory' The error occurs because there is no tomcat service t...

Fedora 16 : tomcat6-6.0.32-17.fc16 (2011-13426)

Fix for CVE-2011-3190 This release is the first using a systemd unit file. SystemV files are packaged separately. During this transition users may experience this error: 'error reading information on service tomcat6: No such file or directory' The error occurs because there is no tomcat service t...

PHP Nop Generator

Generates harmless padding for PHP scripts This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This class implements a "nop" generator for PHP payloads class MetasploitModule 'PHP Nop Generator', 'Alias' = 'phpgeneric',...

EV0104.txt

New eVuln Advisory: Skull-Splitter's PHP Guestbook XSS Vulnerability http://evuln.com/vulns/104/summary.html --------------------Summary---------------- eVuln ID: EV0104 CVE: CVE-2006-1256 Software: Skull-Splitter's PHP Guestbook Sowtware's Web Site: http://www.boysen.be/ Versions: 2.6 2.7 Critic...

[eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability

New eVuln Advisory: Skull-Splitter's PHP Guestbook XSS Vulnerability http://evuln.com/vulns/104/summary.html --------------------Summary---------------- eVuln ID: EV0104 CVE: CVE-2006-1256 Software: Skull-Splitter's PHP Guestbook Sowtware's Web Site: http://www.boysen.be/ Versions: 2.6 2.7 Critic...

woltlabbb2xXSS.txt

Dökümanlar »» Döküman oku --Security Report-- Advisory: Woltlab Burning Board 2.x JGS-Gallery MOD http://site/jgsgalerieslideshow.php?sid=&katid=&userid=XSS EXAMPLE - http://site/jgsgalerieslideshow.php?sid=&katid=&userid=alert'X'; GET - http://site/jgsgaleriescroll.php?userid=XSS EXAMPLE -...

[eVuln] Guestex XSS Vulnerability

New eVuln Advisory: Guestex XSS Vulnerability http://evuln.com/vulns/77/summary.html --------------------Summary---------------- eVuln ID: EV0077 CVE: CVE-2006-0776 Software: Guestext Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripti...

Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities

--Security Report-- Advisory: MyPHPNuke = 1.8.8 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 05:56 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MPN www.myphpnuke.com Version: 1.8.8 and...

Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <= 4.0) multiple XSS vulnerabilities

Dkmanlar »» Dkman oku --Security Report-- Advisory: Woltlab Burning Board 2.x JGS-Gallery MOD = 4.0 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 04:43 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com -...

EV0079.txt

New eVuln Advisory: My Blog BBCode XSS Vulnerabilities http://evuln.com/vulns/79/summary.html --------------------Summary---------------- eVuln ID: EV0079 Software: My Blog Sowtware's Web Site: http://fuzzymonkey.net/cgi-bin/download.cgi?file=blog Versions: My Blog 1.63 Critical Level: Harmless...

[eVuln] CheesyBlog XSS Vulnerability

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

CheesyBlog-1.0.txt

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

[eVuln] BlogPHP Authentication Bypass

New eVuln Advisory: BlogPHP Authentication Bypass http://evuln.com/vulns/34/summary/bt/ --------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class: Remote Status: Unpatched Exploit:...

[eVuln] Benders Calendar SQL Injection

New eVuln Advisory: Benders Calendar SQL Injection http://evuln.com/vulns/30/summary/bt/ --------------------Summary---------------- Software: Benders Calendar Sowtware's Web Site: http://sourceforge.net/projects/benderscalendar/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class:...

[eVuln] Proyecto Domus 'email' XSS Vulnerability

New eVuln Advisory: Proyecto Domus 'email' XSS Vulnerability --------------------Summary---------------- Software: Proyecto Domus Sowtware's Web Site: http://domus.sourceforge.net/ Versions: 2.10 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit: Availabl...

SUSE-SA:2005:046: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2005:046 apache,apache2. A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to 'smuggle' requests past filters by providing handcrafted header entries. Fixed Apache 2 server packages were...

OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER

We're examining resubmitting to bugtraq html.dropper now updated to in include an .exe http://www.securityfocus.com/bid/2260 - apparently the manufacturer didn't consider the original submission worthy of fixing as the same problem has been carried over to Outlook Express 6.00. On a default insta...