Unfixed XSS vulnerability at techblog.gr

Security researcher S@xx0R, has submitted on 20/05/2011 a cross-site-scripting XSS vulnerability affecting techblog.gr, which at the time of submission ranked 45855 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/07/2011. It is currently...

DornCMS <= 1.3 Files Disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

New WhisperMonitor Tool Gives Users Control of Android Security and Privacy Options

As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is se...

Synapse Web Solution SQL Injection

========================================================================= Synapse Web Solution SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | ...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496: Undefined Security Weakness

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CentOS 5 : kernel (CESA-2011:0429)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

[SECURITY] Fedora 13 Update: nss-3.12.9-9.fc13

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 14 Update: nss-3.12.9-9.fc14

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Sqlmap v.0.9 - automatic SQL injection and database takeover tool !

Sqlmap v.0.9 - automatic SQL injection and database takeover tool ! sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for...

RHEL 6 : kernel (RHSA-2011:0421)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

[SECURITY] Fedora 15 Update: nss-3.12.9-14.fc15

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2010-4771

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4772

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

Sql injection

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

CVE-2010-4771

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4772

CVE-2010-4772 documents an XSS vulnerability in S-CMS 2.5. The issue resides in blocks/lang.php, where the id parameter passed to viewforum.php is susceptible to script/HTML injection. The vulnerability is triggered remotely via that parameter, enabling an attacker to inject arbitrary web script ...

CVE-2010-4772

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

CVE-2010-4771

CVE-2010-4771 affects S-CMS 2.5, due to an SQL injection in viewforum.php where the id parameter enables remote attackers to execute arbitrary SQL commands. Reported impact aligns with a base score of 7.5 (HIGH) and network access with low attack complexity. The provided connected documents confi...