SA-CONTRIB-2012-142 - Spambot - Cross Site Scripting (XSS)

The Spambot module enables you to protect new user registrations from spammers using the database at stopforumspam.com. Spambot doesn't sufficiently sanitize API responses from stopforumspam.com when they are logged to the watchdog, allowing a potential XSS attack. This vulnerability is mitigated...

Moderate: Red Hat Security Advisory: spice-gtk security update

Updated spice-gtk packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS Update for libexif CESA-2012:1255 centos5

Check for the Version of libexif OpenVAS Vulnerability Test CentOS Update for libexif CESA-2012:1255 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for dbus CESA-2012:1261 centos6

Check for the Version of dbus OpenVAS Vulnerability Test CentOS Update for dbus CESA-2012:1261 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Megabirlik Bilgi Islem Cross Site Scripting

---------------------------------------------------------------- Megabirlik Bilgi Islem Cross Site Scripting ---------------------------------------------------------------- Exploit Title : Megabirlik Bilgi Islem alert/0/ Greets To : | Amir | B3HZ4D | Packetstormsecurity.org | Exploit-db.com | |...

Researcher Charlie Miller Joins Twitter Security Team

Twitter quietly is assembling a serious security team, with the most recent addition being Charlie Miller, the security researcher known for finding a long line of bugs in the iPhone and other Apple products. Miller, a respected and prolific researcher, will join the social network’s security tea...

Apple Fixes Huge Number of Flaws With iTunes 10.7

Apple has released a massive security update for iTunes on Windows, fixing more than 160 security vulnerabilities. The new version of iTunes is one of the larger security updates by any vendor in the last few years, and many of the fixes are for WebKit vulnerabilities. In its advisory about the...

S&S Computer Imaging SQL Injection

---------------------------------------------------------------- S&S Computer Imaging SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : S&S Computer Imaging Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0...

SA-CONTRIB-2012-140 - Inf08 - Cross Site Scripting (XSS)

Inf08 is a valid XHTML 1.0 Strict / CSS 2.1 theme ported from the free CSS template. The theme contains an arbitrary script injection vulnerability XSS due to the fact that it fails to sanitize user supplied taxonomy vocabulary names before display. This vulnerability is mitigated by the fact tha...

Dynamics Of Design SQL Injection

---------------------------------------------------------------- Dynamics of Design SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Dynamics of Design Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf...

Slackware Advisory SSA:2006-230-01 libtiff

The remote host is missing an update as announced via advisory SSA:2006-230-01. OpenVAS Vulnerability Test $Id: esoftslkssa200623001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-230-01 kernel

The remote host is missing an update as announced via advisory SSA:2009-230-01. OpenVAS Vulnerability Test $Id: esoftslkssa200923001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2006-230-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2009-230-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Kaiyora SQL Injection

---------------------------------------------------------------- Kaiyora SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Kaiyora SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

MyriadSoft SQL Injection

---------------------------------------------------------------- MyriadSoft SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : MyriadSoft SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link...

OnDemand SQL Injection

---------------------------------------------------------------- OnDemand SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : OnDemand SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Shadow infosystem CMS SQL Injection

Exploit Title: Shadow infosystem CMS sql injection Google Dork: "Powerd by Shadow infosystem" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.shadowinfosystem.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu ...

US Creations Web Services CMS Cross Site Scripting

Exploit Title: US Creations Web Services CMS Cross Site Scripting Google Dork: "Powered By: US Creations Web Services" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.us-creations.com/ Version: All Version Category:: webapps Tested...

Synthetix CMS SQL Injection

Exploit Title: Synthetix CMS products.php SQL Injection Vulnerability Google Dork: "Website design & hosting by Synthetix" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.synthetix.com/ Version: All Version Category:: webapps Tested...