Unfixed XSS vulnerability at www.bla.com.au

Security researcher thejanky, has submitted on 28/02/2009 a cross-site-scripting XSS vulnerability affecting www.bla.com.au, which at the time of submission ranked 945382 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is current...

linux/x86 file reader 65 bytes + pathname

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 file reader 65 bytes + pathname ========================================= / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xo...

[SECURITY] [DSA 1712-1] New rt2400 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1712-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.grupmassoler.com

Security researcher hades, has submitted on 22/01/2009 a cross-site-scripting XSS vulnerability affecting www.grupmassoler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is currently...

Upload command to Startup folder

Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...

Unfixed XSS vulnerability at www.vads.ac.uk

Security researcher ResisTance, has submitted on 17/01/2009 a cross-site-scripting XSS vulnerability affecting www.vads.ac.uk, which at the time of submission ranked 3210965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/01/2009. It is...

Unfixed XSS vulnerability at www.unlockingtheworld.com

Security researcher Rj-DevarA, has submitted on 01/01/2009 a cross-site-scripting XSS vulnerability affecting www.unlockingtheworld.com, which at the time of submission ranked 5954093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. ...

Unfixed XSS vulnerability at dealspl.us

Security researcher Azat Harutyunyan, has submitted on 12/06/2008 a cross-site-scripting XSS vulnerability affecting dealspl.us, which at the time of submission ranked 8240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.esp.cityvox.es

Security researcher zprian, has submitted on 12/04/2008 a cross-site-scripting XSS vulnerability affecting www.esp.cityvox.es, which at the time of submission ranked 223899 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is...

[SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1673-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 29, 2008 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.espace-plus.net

Security researcher xylitol, has submitted on 22/11/2008 a cross-site-scripting XSS vulnerability affecting www.espace-plus.net, which at the time of submission ranked 55626 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is...

PHP 5.2.6 - error_log Safe_mode Bypass

PHP 5.2.6 - errorlog Safemode Bypass SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected...

[SECURITY] [DSA 1664-1] New ekg packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1664-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 10, 2008 http://www.debian.org/security/faq -...

Fedora 9 : net-snmp-5.4.1-19.fc9 (2008-9367)

Tue Jul 22 2008 Jan Safranek 5.4.1-19 - fix perl SNMP::Session::set 452131 - support interface names longer than 8 characters 468045 - explicitly require the right version and release of net-snmp and net-snmp-libs - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-18 - explicitly require...

A-Link WL54AP3 / WL54AP2 - Cross-Site Request Forgery / Cross-Site Scripting

Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...

alink-xsrfxss.xt

Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...

Unfixed XSS vulnerability at dorsacms.com

Security researcher PouyaServer, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting dorsacms.com, which at the time of submission ranked 2175960 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at reading.sp2000.org

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting reading.sp2000.org, which at the time of submission ranked 4207564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is...

Unfixed XSS vulnerability at windata.de

Security researcher kInGoFcHaOs, has submitted on 23/10/2008 a cross-site-scripting XSS vulnerability affecting windata.de, which at the time of submission ranked 1017085 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...