XSS vulnerability in BXR search

Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

DiamondList v0.1.6 CSRF Vulnerability

Exploit for php platform in category web applications ===================================== DiamondList v0.1.6 CSRF Vulnerability ===================================== Vulnerability ID: HTB22517 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiamondlist.html Product: DiamondList Vendor:...

Gekko Web Builder 0.90 ALPHA Cross Site Scripting

Vulnerability ID: HTB22474 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingekkowebbuilder.html Product: Gekko Web Builder Vendor: Baby Gekko IT Consulting http://www.babygekko.com/ Vulnerable Version: v0.90 ALPHA and Probably Prior Versions Vendor Notification: 01 July 2010...

XSS vulnerability in WebPress

Vulnerability ID: HTB22480 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress2.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in DSite CMS

Vulnerability ID: HTB22465 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindsitecms.html Product: DSite CMS Vendor: Media Programming Group http://www.dsite.ru Vulnerable Version: 4.81 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

Stored XSS vulnerability in Pixie

Vulnerability ID: HTB22469 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Pligg search module

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22450 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa1.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in Grafik CMS

Vulnerability ID: HTB22438 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingrafikcms.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

PT-2010-3103 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: The issue concerns the improper implementation of the history.replaceState method in certain situations involving IFRAME elements, allowing remote attackers to obtain sensitive information via a...

XSS vulnerability in boastMachine

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

REvolution 10.02 - Cross-Site Request Forgery

REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...

XSS vulnerability in LiSK CMS

Vulnerability ID: HTB22372 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinproduct.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 05 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

Acuity CMS 2.6.2 Cross Site Scripting

Vulnerability ID: HTB22352 Reference: http://www.htbridge.ch/advisory/xssinacuitycms.html Product: Acuity CMS asp version Vendor: The Collective Vulnerable Version: 2.6.2 ASP and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-381)

The Mozilla Firefox browser was updated to version 3.0.5, fixing various security issues and stability problems. The following security issues were fixed : MFSA 2008-69 / CVE-2008-5513: Mozilla security researcher mozbugra4 reported vulnerabilities in the session-restore feature by which content...

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure 0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX|...

Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Flash Image Gallery 1.1 Arbitrary Config File Disclosure Vulnerability ====================================================================== 0x01 Informations: Script ...

Mandriva Linux Security Advisory : metisse (MDVSA-2008:179)

An input validation flaw was found in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory, resulting in the disclosure of sensitive data of other users of the X.org server CVE-2008-1379. Multiple integer overflows were found in X.org's Render...