Unfixed XSS vulnerability at www.pornograb.com

Security researcher PaPPy, has submitted on 02/08/2008 a cross-site-scripting XSS vulnerability affecting www.pornograb.com, which at the time of submission ranked 84267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currentl...

Unfixed XSS vulnerability at www.sitelutions.com

Security researcher Shocker -at- ShockingSoft.com, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.sitelutions.com, which at the time of submission ranked 99238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.ciscoredacaovirtual.com

Security researcher mygotmanoel, has submitted on 02/01/2008 a cross-site-scripting XSS vulnerability affecting www.ciscoredacaovirtual.com, which at the time of submission ranked 1075343 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.tavsancali.net

Security researcher SeYMeN, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.tavsancali.net, which at the time of submission ranked 1963442 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/02/2008. It is...

Fedora 7 : clamav-0.92-6.fc7 (2008-0170)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Unfixed XSS vulnerability at education.answerbox.net

Security researcher Uber0n, has submitted on 27/01/2008 a cross-site-scripting XSS vulnerability affecting education.answerbox.net, which at the time of submission ranked 20676 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at cscmp.org

Security researcher holisticinfosec, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting cscmp.org, which at the time of submission ranked 659022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

[SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1465-2 [email protected] http://www.debian.org/security/ Steve Kemp January 17, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1171-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 1171-1. Several remote vulnerabilities have been discovered in the Ethereal network scanner, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

Debian: Security Advisory (DSA-1171)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.vox.de

Security researcher Persian Fox, has submitted on 15/01/2008 a cross-site-scripting XSS vulnerability affecting www.vox.de, which at the time of submission ranked 24697 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

Unfixed XSS vulnerability at www.lvcva.com

Security researcher holisticinfosec, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.lvcva.com, which at the time of submission ranked 162788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

Unfixed XSS vulnerability at www.schule-beruf.de

Security researcher Camilo-TcK, has submitted on 01/10/2008 a cross-site-scripting XSS vulnerability affecting www.schule-beruf.de, which at the time of submission ranked 3109241 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

Unfixed XSS vulnerability at www.silvercreekgifts.com

Security researcher Uber0n, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.silvercreekgifts.com, which at the time of submission ranked 29939451 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It ...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

Unfixed XSS vulnerability at www.vbfrance.fr

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.vbfrance.fr, which at the time of submission ranked 596419 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2007-6494

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideAction and ChangeSkin parameters...