Unfixed XSS vulnerability at www.hwatters.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.hwatters.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currently...

Unfixed XSS vulnerability at www.cristinalazarlopez.com

Security researcher Norehem, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.cristinalazarlopez.com, which at the time of submission ranked 10201725 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. ...

Unfixed XSS vulnerability at www.stargazete.com

Security researcher CoNqUeRoR, has submitted on 01/07/2007 a cross-site-scripting XSS vulnerability affecting www.stargazete.com, which at the time of submission ranked 8426 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is...

Unfixed XSS vulnerability at cert.webtrust.org

Security researcher Nemessis, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting cert.webtrust.org, which at the time of submission ranked 925689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...

Unfixed XSS vulnerability at www.mtlookup.com

Security researcher pH4nToM, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.mtlookup.com, which at the time of submission ranked 1436508 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...

Unfixed XSS vulnerability at www.turkeyfairpartner.com

Security researcher St@rExT, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.turkeyfairpartner.com, which at the time of submission ranked 2198572 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2007. It...

Unfixed Redirect vulnerability at zirve100.com

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a Redirect vulnerability affecting zirve100.com, which at the time of submission ranked 37453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at www.softwin.ro

Security researcher Nemessis, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.softwin.ro, which at the time of submission ranked 501470 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is current...

Unfixed XSS vulnerability at www.kwalib.or.kr

Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.kwalib.or.kr, which at the time of submission ranked 3713492 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is current...

Unfixed XSS vulnerability at www.j-shopping.jp

Security researcher s0m.ph, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.j-shopping.jp, which at the time of submission ranked 322500 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

Unfixed XSS vulnerability at www.foodsafetyforum.org

Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.foodsafetyforum.org, which at the time of submission ranked 4618925 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. I...

Unfixed XSS vulnerability at www.webdeveloperlist.com

Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.webdeveloperlist.com, which at the time of submission ranked 1261568 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

Unfixed XSS vulnerability at www.tomshardware.com.tr

Security researcher cyber, has submitted on 01/03/2007 a cross-site-scripting XSS vulnerability affecting www.tomshardware.com.tr, which at the time of submission ranked 22936 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/03/2007. It is...

Unfixed XSS vulnerability at www.sarilacivert.org.tr

Security researcher MaXWeL, has submitted on 01/03/2007 a cross-site-scripting XSS vulnerability affecting www.sarilacivert.org.tr, which at the time of submission ranked 6266273 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...

[fixed URLs] firefox/thunderbird/seamonkey

The original advisory for this issue contained incorrect URLs for the Slackware 11.0 patches. Sorry about that! The URLs for the 10.2 packages were correct and the Firefox/Thunderbird links given for 11.0 would have been just fine anyway since 10.2 and 11.0 are using the same packages for those...

linkscaffe30.txt

Gonafish.com LinksCaffe 3.0 is free link indexing directory, we found that the file admin1953.php can be accessed directly to get full administration rights without password and username. Proof of exploit: http://www.example.com/pathtolinksCaffe/Admin/admin1953.php Or the images of mirror...

SSA-2006-0628032502

New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...

kdebase kdm local file reading vulnerability

New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...

Ultimate PHP Board 1.96 GOLD - Multiple Vulnerabilities

"; $ikey = ordsubstr$key, $i, 1; // print $i."ikey:".$ikey.""; $itext = ordsubstr$text, $i, 1...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...