[DCA-00017] LinkSys BEFSR41 Multiple Stored Xss

DCA-00017 LinkSys BEFSR41 Multiple Stored Xss Software/Hardware - LinkSys DSL Router BEFSR41 V2 Vendor Product Description - This Router will allow your computers to share a high-speed Internet connection as well as resources, including files and printers. Bug Description - Linksys does not...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution // Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

[DCA-0006] Baby ASP Web Server DoS

DCA-0006 Software - Baby ASP Server Vendor Product Description - This program was build as an alternative for Microsoft's IIS. The main goal was to design a simple web server with support for ASP. Setting up Baby ASP Web Server is very easy: copy the executable to a directory of your choice, set...

[DCA-0009] - NetWordDLS Finger Server Denial of Service

DCA-0009 - NetWordDLS Finger Server Denial of Service Software - NetWordDLS Finger Server Vendor Product Description - A windows server application that reports back to users the machine name and the current logged on user Bug Description - Server does not validate the input size leading to a...

Mozilla Foundation Security Advisory 2010-33

Mozilla Foundation Security Advisory 2010-33 Title: User tracking across sites using Math.random Impact: Low Announced: June 22, 2010 Reporter: Amit Klein Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.4 Firefox 3.5.10 SeaMonkey 2.0.5 Description Security researcher Amit Klein reported that i...

Weborf HTTP Server 0.12.1 Denial Of Service

DCA-0012 Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web server written in C. It supports IPv6 and basic authentication. It doesn't implement the full HTTP specification, but can be used to easily share directories or files. Bug Description - Weborf HTTP...

CMS Made Simple Cross Site Scripting

CMS Made Simple: backend cross site scripting XSS, CVE-2010-1482 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1482 http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.html http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/ Description CM...

Mozilla Foundation Security Advisory 2010-23

Mozilla Foundation Security Advisory 2010-23 Title: Image src redirect to mailto: URL opens email editor Impact: Low Announced: March 30, 2010 Reporter: Henry Sudhof Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 SeaMonkey 2.0.4 Description phpBB developer Henry Sudhof reporte...

Croogo CMS 1.2 Cross Site Scripting Vulnerabilities

Croogo CMS 1.2 Cross Site Scripting Vulnerabilities ========================================== Vulnerable Software: 1.2 and prior Release Date: 2010-03-06 Last Update: 2010-02-01 Critical: Low Impact: Session hijack Denial of service Code execution Solution Status: Webvuln has informed and...

RHEL 3 / 4 : Satellite Server (RHSA-2008:0524)

Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. This release corrects several...

CentOS 5 : openssh (CESA-2009:1287)

Updated openssh packages that fix a security issue, a bug, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

RHEL 5 : gdm (RHSA-2009:1364)

Updated gdm packages that fix a security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNOME Display Manager GDM is a configurable re-implementation of XDM, the X Display...

Mozilla Foundation Security Advisory 2009-38

Mozilla Foundation Security Advisory 2009-38 Title: Data corruption with SOCKS5 reply containing DNS name longer than 15 characters Impact: Low Announced: July 21, 2009 Reporter: Andrej Andolsek Products: Firefox Fixed in: Firefox 3.5.2 Firefox 3.0.12 Description Andrej Andolsek reported that whe...

Mozilla Foundation Security Advisory 2008-66

Mozilla Foundation Security Advisory 2008-66 Title: Errors parsing URLs with leading whitespace and control characters Impact: Low Announced: December 16, 2008 Reporter: Chip Salzenberg Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.5 Firefox 2.0.0.19 Thunderbird 2.0.0.19 SeaMonk...

Mozilla Foundation Security Advisory 2008-67

Mozilla Foundation Security Advisory 2008-67 Title: Escaped null characters ignored by CSS parser Impact: Low Announced: December 16, 2008 Reporter: Kojima Hajime Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.5 Firefox 2.0.0.19 Thunderbird 2.0.0.19 SeaMonkey 1.1.14 Description...

Mozilla Foundation Security Advisory 2008-58

Mozilla Foundation Security Advisory 2008-58 Title: Parsing error in E4X default namespace Impact: Low Announced: November 12, 2008 Reporter: Chris Evans Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.4 Firefox 2.0.0.18 Thunderbird 2.0.0.18 SeaMonkey 1.1.13 Description Security...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP02 security update

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix various security issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP02. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

paranews-xss.txt

Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...

Low: Red Hat Security Advisory: Red Hat Network Proxy Server security update

Red Hat Network Proxy Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Proxy Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. The Red Hat Network Proxy Server 4.2....