Unfixed XSS vulnerability at www.clickindia.com

Security researcher austinator, has submitted on 08/03/2009 a cross-site-scripting XSS vulnerability affecting www.clickindia.com, which at the time of submission ranked 1160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2009. It is...

Unfixed XSS vulnerability at www.heaven-hill.com

Security researcher skathgh420, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting www.heaven-hill.com, which at the time of submission ranked 1478814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is...

Unfixed XSS vulnerability at www.deltahotels.com

Security researcher nopic01, has submitted on 22/07/2009 a cross-site-scripting XSS vulnerability affecting www.deltahotels.com, which at the time of submission ranked 90593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)

The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.systempro.com.br

Security researcher Vinicius Viana, has submitted on 07/03/2009 a cross-site-scripting XSS vulnerability affecting www.systempro.com.br, which at the time of submission ranked 13623141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010...

More Privacy Controls Coming to Facebook

From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...

DEBIAN-CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...

Unfixed XSS vulnerability at www.addictech.com

Security researcher jjbutler88, has submitted on 27/05/2009 a cross-site-scripting XSS vulnerability affecting www.addictech.com, which at the time of submission ranked 631768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at archiv.bundestag.t-bn.de

Security researcher cAs, has submitted on 27/05/2009 a cross-site-scripting XSS vulnerability affecting archiv.bundestag.t-bn.de, which at the time of submission ranked 366199 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

COWON America jetCast 2.0.4.1109 (.mp3) Local Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== COWON America jetCast 2.0.4.1109 .mp3 Local Overflow Exploit ============================================================== ?php / COWON America jetCast 2.0.4.1109 .mp3 local hea...

Unfixed XSS vulnerability at egitimofis.com

Security researcher CCC, has submitted on 18/04/2009 a cross-site-scripting XSS vulnerability affecting egitimofis.com, which at the time of submission ranked 482979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently...

[SECURITY] [DSA 1754-1] New roundup packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1754-1 [email protected] http://www.debian.org/security/ Florian Weimer April 09, 2009 http://www.debian.org/security/faq -...

Mandriva Update for x11-driver-video MDVA-2008:048 (x11-driver-video)

Check for the Version of x11-driver-video OpenVAS Vulnerability Test Mandriva Update for x11-driver-video MDVA-2008:048 x11-driver-video Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for x11-driver-video MDVA-2008:048 (x11-driver-video)

Check for the Version of x11-driver-video OpenVAS Vulnerability Test Mandriva Update for x11-driver-video MDVA-2008:048 x11-driver-video Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

RedHat Update for vsftpd RHSA-2008:0295-01

Check for the Version of vsftpd OpenVAS Vulnerability Test RedHat Update for vsftpd RHSA-2008:0295-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...