URL token stealing via stylesheet redirect — Mozilla

Security researcher Martin Straka reported that Gecko-based browsers update the .href property of stylesheet DOM nodes to reflect the final URI of the stylesheet after following any 302 redirects much as the document.location property is updated. This differs from other browsers and could...

Debian Security Advisory DSA 1468-1 (tomcat5.5)

The remote host is missing an update to tomcat5.5 announced via advisory DSA 1468-1. OpenVAS Vulnerability Test $Id: deb14681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1468-1 tomcat5.5 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

esmart-bypass.txt

Aria-Security Team http://aria-security.net -------------------------------------- Vendor :http://www.preproject.com Script/Portal: E-SMART CART You can bypass the login page with: ' or ' Shouts :theoutl4w...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

tomcat handling of cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes "'" as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...

tomcat handling of cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes "'" as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...

NULL pointer dereference triggered by ptrace

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs the xcs field during ptrace single-step operations, which allows local users to cause a denial of service NULL dereference and OOPS via certain code that makes ptrace PTRACESETREGS and...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10...

CVE-2007-5524

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9...

CVE-2007-5525

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10...

CVE-2007-5524

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9...

CVE-2007-5524

Technical details for CVE-2007-5524 are not publicly provided in the supplied documents; no specific affected products/versions, root cause, or remediation are disclosed. Monitor for updates.

CVE-2007-5525

Technical details about CVE-2007-5525 are not provided in the supplied documents; the entries describe an unspecified vulnerability without impact or vectors. Monitor for updates.

CVE-2007-5524: Undefined Security Weakness

Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9...