JVN#81667751 Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins

WebLogic Server and WebLogic Express are application servers based on Java Platform Enterprise Edition 5 JavaEE5 and provided by Oracle formerly BEA Systems, Inc.. Plug-ins for Apache, Sun, and Microsoft IIS web servers which are included in WebLogic Server and WebLogic Express contain a director...

TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

mm chat 1.5 - Local File Inclusion / Cross-Site Scripting

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

SwiftView ActiveX control and plug-in stack buffer overflow

Overview The SwiftView ActiveX control and plug-in contain a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SwiftView is software used to view or print PCL, HPGL, and TIFF files. SwiftSend is a product used f...

GLSA-200712-22 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-22 Opera: Multiple vulnerabilities David Bloom reported two vulnerabilities where plug-ins CVE-2007-6520 and Rich text editing CVE-2007-6522 could be used to allow cross domain scripting. Alexander Klink Cynops GmbH...

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

Cross site scripting

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-5856

Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests, which might allow remote attackers to obtain sensitive information...

opera -- multiple vulnerabilities

Opera Software ASA reports about multiple security fixes: Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. Fixed an issue with TLS certificates that could be used to execute arbitrary code, as...

Unfixed XSS vulnerability at www.tnw.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.tnw.jp, which at the time of submission ranked 2912575 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at www.withyou-hp.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.withyou-hp.com, which at the time of submission ranked 8075093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/200...

Unfixed XSS vulnerability at www.wataku.co.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.wataku.co.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at www.ls-takano.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.ls-takano.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It i...

Unfixed XSS vulnerability at www.3mori.co.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.3mori.co.jp, which at the time of submission ranked 7706455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. ...

Unfixed XSS vulnerability at 496.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting 496.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is currently...

Unfixed XSS vulnerability at www.ghost.ne.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.ghost.ne.jp, which at the time of submission ranked 22940 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It...

Unfixed XSS vulnerability at www.hksuiren.gr.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.hksuiren.gr.jp, which at the time of submission ranked 841848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007...

Unfixed XSS vulnerability at www.yunohana.co.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.yunohana.co.jp, which at the time of submission ranked 1883260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/200...