Unfixed XSS vulnerability at www.sohohotel.com

Security researcher nullbyt3, has submitted on 25/08/2010 a cross-site-scripting XSS vulnerability affecting www.sohohotel.com, which at the time of submission ranked 192013 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

Unfixed XSS vulnerability at www.ine.pt

Security researcher Juza, has submitted on 16/08/2010 a cross-site-scripting XSS vulnerability affecting www.ine.pt, which at the time of submission ranked 144137 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...

PT-2010-4309 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.2 before 7.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 before 8.05.15 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.1...

Unfixed XSS vulnerability at www.ocexcelsior.com

Security researcher Devek, has submitted on 27/07/2010 a cross-site-scripting XSS vulnerability affecting www.ocexcelsior.com, which at the time of submission ranked 2313948 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2072-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 19, 2010 http://www.debian.org/security/faq -...

Google Chrome 5.0.375.99更新修复多个安全漏洞

BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...

CVE-2010-2630

Affected software: LibTIFF 3.9.0. Vulnerability: TIFFReadDirectory fails to properly validate the data types of codec-specific TIFF tags with an out-of-order position in a TIFF file. Impact: remote denial of service (application crash) via a crafted TIFF image. Root cause: insufficient validation...

Unfixed XSS vulnerability at www.itmaasia.com

Security researcher k3vin mitnick, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting www.itmaasia.com, which at the time of submission ranked 1154265 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is...

Unfixed XSS vulnerability at www.molndal.pingst.se

Security researcher pimpim, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting www.molndal.pingst.se, which at the time of submission ranked 1584691 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...

Apple Webkit SVG RadialGradiant Run-in Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

[SECURITY] [DSA 2056-1] New zonecheck packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2056-1 [email protected] http://www.debian.org/security/ Sébastien Delafond June 06, 2010 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at rdg.ttweb2.net

Security researcher Viper.aT, has submitted on 31/05/2010 a cross-site-scripting XSS vulnerability affecting rdg.ttweb2.net, which at the time of submission ranked 1798561 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Managing Cookies

By selecting the Sites… button, you can manage the cookie settings for specific sites. You can add or remove sites, and you can change the current settings for existing sites. The bottom section of this window will specify the domain of the site and the action to take when that site wants to plac...

Unfixed XSS vulnerability at www.dailycamera.com

Security researcher PaPPy, has submitted on 05/01/2010 a cross-site-scripting XSS vulnerability affecting www.dailycamera.com, which at the time of submission ranked 35086 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Code injection

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

CVE-2010-1592 affects the Sandra Device Driver (sandra.sys) in SiSoftware Sandra, up to version 15.18.1.1 and earlier. The vulnerability is described as allowing local users to gain privileges or cause a denial of service (system crash) via unspecified vectors involving Model-Specific Registers. ...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving "Model-Specific Registers."...

CVE-2010-1592

sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service system crash via unspecified vectors involving “Model-Specific Registers.” Recent assessments: Assessed Attacker Value: 0...