webEdition CMS 6.1.0.2 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................Web Edition 6.1.0.2 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.webedition.org Vendor Contact Date.....3/13/2011 Disclosure...

OpenCollab 1.4.3 Cross Site Scripting

------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...

Wordpress plugin Comment Rating JavaScript Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin Comment Rating JavaScript Execution Vulnerability Author: sasa1 mysite: www.dev-chat.com Vendor: http://wealthynetizen.com Download: http://downloads.wordpress.org/plugin/comment-rating.zip Exploit 4 Comment...

Ubuntu Update for thunderbird vulnerabilities USN-1050-1

Ubuntu Update for Linux kernel vulnerabilities USN-1050-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10501.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-1050-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS / 10.10 : thunderbird vulnerabilities (USN-1050-1)

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous discovered several memory issues in the browser engine. An attacker could exploit these to crash the browser or possibly run arbitrary code as the user invoking the...

Dokeos 1.8.6.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Dokeos 1.8.6.2 Vulnerability...........Reflected Cross-site Scripting Download................http://www.dokeos.com/ Release Date............2/12/2011 Tested On...............Windows Vista + XAMPP...

CiviCRM 3.3.3 Drupal-Joomla Cross Site Scripting

------------------------------------------------------------------------ Software................CiviCRM 3.3.3 Drupal-Joomla Vulnerability...........Reflected Cross-site Scripting Download................http://civicrm.org/ Release Date............2/2/2011 Tested On...............Windows Vista +...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

WordPress FCChat Widget 2.1.7 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress FCChat Widget 2.1.7 Vulnerability...........Reflected Cross-site Scripting Download................http://www.fastcatsoftware.com/ Release Date............1/23/2011 Tested...

html-edit CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 201...

html-edit CMS - Multiple Vulnerabilities

html-edit CMS - Multiple Vulnerabilities Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerabili...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:251-2)

Security issues were identified and fixed in firefox : Security researchers Yosuke Hasegawa and Masatoshi Kimura reported that the x-mac-arabic, x-mac-farsi and x-mac-hebrew character encodings are vulnerable to XSS attacks due to some characters being converted to angle brackets when displayed b...

CentOS 3 / 4 : seamonkey (CESA-2010:0781)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for seamonkey CESA-2010:0781 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0781 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

sNews CMS Multiple XSS Vulnerabilities

Exploit for php platform in category web applications ====================================== sNews CMS Multiple XSS Vulnerabilities ====================================== Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNe...

Design/Logic Flaw

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure source: https://www.securityfocus.com/bid/43685/info Research In Motion BlackBerry Device Software is prone to a cross-domain information-disclosure vulnerability because the application's web browser fails ...

BlackBerry Cross Origin Bypass

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + BlackBerry Browser Cross Origin Bypass + Author : 599eme Man + Contact : [email protected]...

SeaMonkey < 2.0.7 Multiple Vulnerabilities

Binary data 5660.prm...

SeaMonkey < 2.0.7 Multiple Vulnerabilities

Binary data 800885.prm...