SA-CONTRIB-2011-038 - Taxonomy Views Integrator - Cross Site Scripting

This module enables you to override whole vocabularies or individual terms with the View of your choice. The module did not filter user entered term descriptions for Cross Site Scripting XSS injections. This vulnerability is mitigated by the fact that an attacker must have a role with the...

SA-CONTRIB-2011-037- Node Invite - Cross Site Scripting

The Node Invite module allows you to invite users with existing accounts or otherwise to specified nodes on a Drupal site. This module does not properly use t strings to ensure all text was sanitized when data was output through a formseterror message, thus creating a Cross Site Scripting XSS...

Unfixed XSS vulnerability at www.clinicalpharmacy.ir

Security researcher Montazer 313 Digital Security Team, has submitted on 29/08/2011 a cross-site-scripting XSS vulnerability affecting www.clinicalpharmacy.ir, which at the time of submission ranked 8242748 on the web according to Alexa. We manually validated and published a mirror of this...

NINEBOARD 3.0 <= SQLi & Upload Vulnerabelity

Exploit for php platform in category web applications ================================================================================= Web : ashiyane.org e-mail : KaFaran DOT Bi DOT Edeaa AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!-...

Concept500 CMS Cross Site Scripting

Exploit Title: Concept500 CMS XSS Vulnerability Date: 2011-08-11 Author: Sepehr Security Team Software Site: http://www.concept500.co.uk/ ++++++++++++++++++++++++ Exploit: http:///shop/viewphoto.php?shoph=idXSS&phqu=id XSS: " alertString.fromCharCode88, 83, 83 Demo:...

CentOS Update for openssl096b CESA-2009:0004 centos3 i386

Check for the Version of openssl096b OpenVAS Vulnerability Test CentOS Update for openssl096b CESA-2009:0004 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for openssl097a CESA-2009:0004 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2009:1222 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2009:1222 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1222 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Forbes.com Vulnerable to XSS injection

Forbes.com Vulnerable to XSS injection One of the Leading News Company Forbes is Vulnerable. Hacker with name "B1uB3rry " expose that Forbes.com is vulnerable to possible SQL injection but confirmed to be vulnerable to Cross Site Script Injection XSS & HTML Injection. According to hacker "One can...

1 1 4. Site Navigation guestbook injection vulnerability-vulnerability warning-the black bar safety net

Rain forest wind the 1 1 4. Site Navigation program message file exists injection vulnerabilities. 漏洞 文件 feedback/feedback.php An attacker using the EXP can get administrator ID and MD5 password. Version:=1.5 EXP is as follows: ? php $sbcopyright=' ---------------------------------------- 114la...

CentOS 5 : kernel (CESA-2011:0927)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

SA-CONTRIB-2011-028 - Simple Clean - Cross Site Scripting

Simple Clean is a simple and stripped clean theme for Drupal. The theme contains a cross site scripting XSS vulnerability that can be exploited when posting comments. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "post comments". Versions affect...

SAP Player 0.9 Buffer Overflow

SAP Player 0.9 .m3u universal Diret ret version Author Abhishek Sahni - abhil00703atgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.sorinara.com/sap/sap09.exe Vulnerable versio...

Mahyanet CMS Shell Upload

-------------------------------------------------------------------------------- @ Mahyanet Cms FCKeditor Arbitary File Upload Vulnerability --------------------------------------------------------------------------------...

SA-CONTRIB-2011-026 - Secure Password Hashes (phpass) - Multiple Vulnerabilities

This module uses the PHPass hashing library to try to store users hashed passwords securely. The module sets a fixed string for the 'pass' column in the users database column but does not replace the pass attribute of the account object used for password reset links. This leads to a vulnerability...

WanHu ezEIP 2. 0 injection vulnerability 0day-vulnerability warning-the black bar safety net

System name: WanHu ezEIP System version: 2.0 Vulnerability found by: Akast N. S. T Security team: Neuron Security Team Vulnerability type: SQL injection Vulnerability file:/caseinfo. asp Vulnerability variable: Newid=1&cid=1 Software type: business software Development company: Guangzhou million...

NSFOCUS SA2011-01 : Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability

NSFOCUS Security AdvisorySA2011-01 Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability Release Date: 2011-06-15 CVE ID: CVE-2011-1250 http://www.nsfocus.com/en/advisories/1101.html Affected Software and System: ============================= Microsoft Internet...

Back-and-Forth to Continue Between Macdefender and Apple

There is a serious game of back-and-forth going on between the security team over at Apple and the developers of the Macdefender malware. As reported by Threatpost, Apple deployed a patch to remedy the troubling fake AV, then shortly after that, the developers of Macdefender altered their methods...

New Version of Chrome Fixes Four Security Bugs

Google on Wednesday pushed out a new version of its Chrome browser to users, a release that fixes four security bugs, including two critical vulnerabilities. Only one of the bugs fixed in Chrome 11.0.696.71 qualified for the company’s bug bounty program, a high-severity problem caused by a stale...