Microsoft Patches Hotmail Security Vulnerability !

Microsoft recently patched a Hotmail security flaw that enabled attackers to access a user's e-mails and contacts. "The vulnerability was actively being exploited using emails that contained malicious scripts, Trend Micro researcher Karl Dominguez said Monday," writesThe Register's Dan Goodin...

Seo Panel Multiple Cross-site Scripting (XSS) Vulnerabilities

Seo Panel is prone to multiple Cross- site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS KB2501696: Vulnerability in MHTML Could Allow Information Disclosure

A flaw exists in the way MHTML interprets MIME-formatted requests for content blocks within a document. An attacker, exploiting this flaw, could cause a victim to run malicious scripts when visiting various websites, resulting in information disclosure. %NASLMINLEVEL 999999 C Tenable Network...

Inout Webmail Script Persistent XSS Vulnerability

Exploit for php platform in category web applications Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Inout Webmail Script - Persistent Cross-Site Scripting

Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

XSS vulnerability in Confluence Space Names

We have identified and fixed a cross-site scripting XSS vulnerability in Confluence Space Names. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's own web server. An attacker's te...

WebsiteKit Gbplus - 'Name' / 'Body' HTML Injection

source: https://www.securityfocus.com/bid/42842/info Gbplus is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run ...

Open Realty 2.x and 3.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ==================================================== Open Realty 2.x and 3.x Persistent XSS Vulnerability ==================================================== Author: K053 Date: 2010-7-24 Hompage: http://open-realty.org Download Link:...

Joomla Component com_mls_teams Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component commlsteams Persistent XSS Vulnerability ===========================================================...

Firefox + NoScript

NoScript for Firefox is an open-source add-on that pre-emptively blocks malicious scripts and allows JavaScript, Java and other potentially dangerous content only from sites you trust. Because Firefox does not have easily-configured security zones like Internet Explorer, NoScript is needed to...

Joomla AWD Song Cross Site Scripting

================================================ Joomla comawdsong persistent xss Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Joomla Component com_jesectionfinder Upload Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla JE Property Finder Component Upload Vulnerability ========================================================...

DBSite w/b CMS Cross Site Scripting

========================================= DBSite w/b CMS Multiple XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

Java Mini Web Server 1.0 - Directory Traversal / Cross-Site Scripting

Exploit Title: Java Mini Web Server | www.DigitalWhisper.co.il Software Link: http://www.jibble.org/miniwebserver/ Version: YOURXSSHEREWork?Index of %00"Work?Index of %00"Work? Work?SimpleWebServer.jar SimpleWebServer http://www.jibble.org/ Path Traversal: A Path Traversal attack aims to access...

IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 12, 2010 IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== IBM Lotus Software delivers robust collaboratio...

uCosminexus Portal Framework Cross-Site Scripting Vulnerability

Overview uCosminexus Portal Framework has a cross-site scripting vulnerability. Impact A remote attacker could make users of affected systems unknowingly execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate actio...

Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Irene Abezgauz, Hacktics. 22-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, a persistent cross-site scripting vulnerability was identified in the...

Lighttpd mod_fastcgi Extension CGI Variable Overwriting (CVE-2007-4727)

Lighttpd is an open source HTTP server project. Lighttpd focus on smaller memory footprint and higher runtime efficiency. The server supports an advanced feature set, including FastCGI. A variable overwriting vulnerability exists in Lighttpd FastCGI extension. A remote unauthenticated attacker ca...

You!Hostit! Template for Joomla! Remote XSS attack

Exploit for unknown platform in category web applications ================================================== You!Hostit! Template for Joomla! Remote XSS attack ================================================== Example:...

Microsoft Says Google Chrome Frame is IE Security Risk

Google’s decision to introduce a plug-in that runs Google Chrome inside Microsoft’s Internet Explorer isn’t sitting well with the folks at Redmond. The Google Chrome Frame, which is presented as a seamless way to bring Google Chrome’s open web technologies and speedy JavaScript engine to Internet...