Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...

[SECURITY] Fedora 9 Update: dia-0.96.1-7.fc9

The Dia drawing program is designed to be like the WindowsTM Visio program. Dia can be used to draw different types of diagrams, and includes support for UML static structure diagrams class diagrams, entity relationship modeling, and network diagrams. Dia can load and save diagrams to a custom fi...

popnupblog-xss.txt

PopnupBlog index.php multiple variables XSS Vendor url:http://www.bluemooninc.biz/ Advisore:http://lostmon.blogspot.com/2008/08/ popnupblog-indexphp-multiple-variables.html Vendor notify:no exploits availables:yes PopnupBlog contains a flaw that allows a remote cross site scripting attack.This fl...

googlecustom-xss.txt

Google custom search engine contributors invite XSS Vendor url: http://www.google.com Product Url: http://www.google.com/coop/cse/ Advisore url:http://lostmon.blogspot.com/2007/08/ google-custom-search-engine.html Vendor notify :yes vendor confirmed: yes Fixed: YES Description: A Custom Search...

vTiger CRM 4.2 - calpath Multiple Remote File Inclusions

vTiger CRM 4.2 - calpath Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV54$2006 ----------------------------------------------------------------------------------------------- ECHOADV54$2006vtiger CRM =4.2 calpath Multiple...

spymacXSSflaws.txt

Multiple Cross site scripting in Spymac WOS v Vendor url: http://www.spymac.com/network.php?p=wos Advisore:http://lostmon.blogspot.com/2006/05/ multiple-cross-site-scripting-in.html Vendor notify: yes Exploit available: yes Spymac WOS is powered by an integrated collection of Web and desktop...

CVE-2006-1894

CVE-2006-1894 affects RevoBoard 1.8 (derived from PunBB). The vulnerability is a cross-site scripting (XSS) flaw in the email address obfuscator: a substitution cipher used for the email tag can be reversed to reveal injected script/HTML, enabling remote code execution in the user’s browser. Affe...

SKForum XSS vuln.

SKForum XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:http://soft.killingar.net/documents/SKForum affected versions:1.5 and prior orginal advisory:http://pridels.blogspot.com/2006/04/skforum-xss-vuln.html Vuln. Description: SKForum contains a flaw that allows a remote cross site...

Speartek XSS vuln.

Speartek XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/speartek-xss-vuln.html vednor:http://www.speartek.com affected version:6.0 and prior Product Description: SpearTek's advanced solutions help you optimize the Internet channel to fu...

damoon(r) XSS vuln

damoonr XSS vuln Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/damoon-xss-vuln.html vendor:http://www.mindroute.us/?id=2452 affected version: latest Vuln. Description: damoonr contains a flaw that allows a remote cross site scripting attack. Thi...

mantis -- "view_filters_page.php" cross-site scripting vulnerability

r0t reports: Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to "targetfield" parameter in "viewfilterspage.php" isn't properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL tha...

Go to the Black anti-phishing-exploit warning-the black bar safety net

With phishing attacksartin the country to be disclosed later, the networkas if into the vastness of the ocean, a wide variety of phishing attacks everywhere. A newtechnologyis public, I how could not go to attention? So they go online and in magazines to find some information abouttechnologyof...

mantis -- "view_filters_page.php" cross site scripting vulnerability

r0t reports: Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to "targetfield" parameter in "viewfilterspage.php" is not properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL th...

SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion

SugarCRM is a Customer Relationship Manager written in PHP. The version of SugarCRM installed on the remote host does not properly sanitize user input in the 'beanFiles' parameter in the 'acceptDecline.php' file. A attacker can use this flaw to display sensitive information and to include malicio...

CVE-2005-4086

SugarCRM

OpenCA libCheckSignature function fails to properly verify the signature of certificates

Overview OpenCA may accept a signature from a certificate if the certificate's chain is trusted by the chain directory of OpenCA. Description The OpenCA PKI Development Project is a Certification Authority. A vulnerability exists in the way the libCheckSignature function compares the certificate ...

Linux news 20.11.00

Следующий шаг ядра стабильной ветки - 2.2.18pre22 Следующий шаг на пути к 2.2.19. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-19-009-04-NW-KN Linux 2.4.0-test11 Вышло очередное тестовое ядро... Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ AC Kernel Patch 2.2.x 2.2.18pre...

CVE-1999-0539

Technical details about CVE-1999-0539 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0583

There is a one-way or two-way trust relationship between Windows NT domains...

CVE-1999-0515

CVE-1999-0515 relates to an unrestricted remote trust relationship in Unix/Linux environments (eg, using + in /etc/hosts.equiv/.rhosts via rsh). Root access can be gained if a trusted host is compromised. Remediation described in sources: remove the wildcard (+) from /etc/hosts.equiv and the root...