CitySights NY Data Breach Exposes 110,000 Customers' Personal Information

CitySights NY, a company that organizes New York City tours on double-decker buses, has experienced a significant data breach. The personal information of 110,000 customers, including names, addresses, email addresses, credit card numbers, expiration dates, and Card Verification Value CVV2 codes,...

UBUNTU-CVE-2010-3821

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets CSS token sequence, which allows remote attackers to execute arbitrary code or cause a denial of...

Debian DSA-2113-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been discovered in Drupal 6 a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3091 Several issues have been discovered in the OpenID module that allows malicious access to use...

Apple Safari Webkit Button First-Letter Style Rendering Code Execution (CVE-2010-1392)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

DSA-2113-1 drupal6 - several vulnerabilities

Bulletin has no description...

Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. Authentication is not required to exploit this vulnerability. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

Apple Safari Webkit SVG First-Letter样式远程代码执行漏洞

BUGTRAQ ID: 42037 CVE ID: CVE-2010-1785 Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器。 Safari的Webkit没有正确地实现SVG文本元素上下文中的first-letter样式，在将该样式应用到这个元素时首先会计算高度以判断 inline box的溢出。在遍历高度元素时，函数库会使用来自不存在linebox的数据。成功攻击会导致执行任意代码。 Apple Safari 5.x Apple Safari 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-1401

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vecto...

Joomla com_org SQL Injection Vulnerability (letter parameter)

Exploit for unknown platform in category web applications ============================================================= Joomla comorg SQL Injection Vulnerability letter parameter ============================================================= Joomla comorg SQL Injection Vulnerability letter paramet...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Firefox crashes with evidence of memory corruption

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified...

Radisson Hotels Report Significant Data Breach

Add the Radisson Hotels & Resorts chain to the growing list of businesses datalossdb.org reporting significant data breaches that exposed sensitive customer data. In an open letter radisson.com to guests, Radisson chief operating officer Fredrik Korallus said the hotel chain’s computer system was...

Malware-Infected CD Mailing was Part of Pen Test

The malware-infected CDs that were mailed to some credit unions may have been part of a penetration test designed to gauge whether an employee would run the software. The SANS Internet Storm Center says it was notified by a representative from Microsolved that the mailing was part of an authorize...

FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. VID a1126054-b57c-11dd-8892-0017319806e7 OpenVAS Vulnerability Test $ Description: Auto generated from VID a1126054-b57c-11dd-8892-0017319806e7 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: a2ps-a4, a2ps-letter, a2ps-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: a2ps-a4, a2ps-letter, a2ps-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. VID 9168253c-5a6d-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. VID 72da8af6-7c75-11d9-8cc5-000854d03344 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-2425

CVE-2008-2425 : FicHive 1.0 – SQL injection in index.php allowing remote attackers to execute arbitrary SQL via the letter parameter in a Search action. This entry notes a different vector than CVE-2008-2416 (category parameter in Fiction action). No remediation details are provided in the connec...