HTML files generated with Javadoc are vulnerable to a XSS

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

LinkedIn Toolbar 3.0.2.1098 - Remote Buffer Overflow

In God We Trust, VDA Labs, LLC function repeatn,c retval=""; for i=0;i milw0rm.com 2007-07-24...

CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

fizzle-access.txt

Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus for formatting to lose their layout I told him it would be too difficult to sanitize the data...

CVE-2007-1159

CVE-2007-1159 describes a cross-site scripting (XSS) vulnerability in the Pyrophobia web application, specifically in the file modules/out.php for version 2.1.3.1. The flaw allows remote attackers to inject arbitrary web script or HTML by manipulating the id parameter. The entry notes the provena...

BO-BLOG vulnerability to submit 1 sentence horse tool[html]-vulnerability warning-the black bar safety net

Belongs to type:Web Apps The following proceduresmethodsmay carry offensive,for security research and teaching purposes. At your own risk! Code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" HTMLHEADTITLEThe Csript For The "? php eval$POSTcmd?& gt;" /TITLE META...

Microsoft Internet Explorer 7 - MHTML Denial of Service

source: https://www.securityfocus.com/bid/20875/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to parse certain malformed HTML content. Successfully exploiting this issue will cause the affected application to cras...

Microsoft Internet Explorer无效HTML解析代码执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理特制的无效HTML时存在漏洞。攻击者可以创建恶意的Web页面，如果用户访问了该页面的话就会导致内存破坏。成功利用这个漏洞的攻击者可以完全控制受影响的系统。 Microsoft Internet Explorer 5.0 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1...

CVE-2006-5063

Cross-site scripting XSS vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the show parameter in a Template operation...

CVE-2006-0063

CVE-2006-0063 affects phpBB 2.0.19, where enabling “Allowed HTML tags” permits cross-site scripting by injecting arbitrary script or HTML via a permitted tag using a single quote character and active attributes such as onmouseover; this is a variant of CVE-2005-4357. The available connected docum...

CVE-2005-4551

The CVE-2005-4551 issue affects the web app codegrrl SimpBook 1.0 . The vulnerability is a Cross-site Scripting (XSS) flaw in sign.php when the configuration flag html_enable is enabled. An attacker can supply arbitrary HTML/script via the message parameter to index.php, which could be reflected ...

Fedora Core 3 : firefox-1.0.6-1.2.fc3 (2005-872)

An updated firefox package that fixes as security bug is now available for Fedora Core 3 and Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox process...

[NT] Serena Software's TeamTrack Sensitive Content Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

BasiliX Webmail 1.1 - Email Header HTML Injection

source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain acces...

CVE-1999-1472

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML DHTML to send the data to the attacker, aka the Freiburg text-viewing issue...

XMB Forum 1.6 pre-beta - Image Tag Script Injection

source: https://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a forum message. This has been fixed i...

Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure

Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure source: https://www.securityfocus.com/bid/3304/info Power Up HTML is a set of HTML-like commands that can be placed into web pages. It provides a central routing point to simplify programming and customization of CGI script...

Security Bulletin (MS00-056)

Microsoft Security Bulletin MS00-056 - -------------------------------------- Patch Available for "Microsoft Office HTML Object Tag" Vulnerability Originally posted: August 09, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in certain Microsoftr Offic...