Unfixed XSS vulnerability at movies.justdial.com

Security researcher Mr52, has submitted on 08/08/2011 a cross-site-scripting XSS vulnerability affecting movies.justdial.com, which at the time of submission ranked 891 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

[SECURITY] [DSA 2289-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2289-1 [email protected] http://www.debian.org/security/ Florian Weimer August 07, 2011 http://www.debian.org/security/faq -...

Authentication flaw

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors...

[SECURITY] [DSA 2275-1] openoffice.org security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2275-1 [email protected] http://www.debian.org/security/ Nico Golde July 7, 2011 http://www.debian.org/security/faq -...

Ubuntu 10.10 : linux vulnerabilities (USN-1160-1)

Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. CVE-2010-4529 Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc...

[SECURITY] [DSA 2262-1] moodle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2262-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 15, 2011 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.s4c.co.uk

Security researcher Iolo Morganwg, has submitted on 15/06/2011 a cross-site-scripting XSS vulnerability affecting www.s4c.co.uk, which at the time of submission ranked 468892 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Nmap NSE net: imap-capabilities

Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. OpenVAS Vulnerability Test $Id: gbnmapimapcapabilitiesnet.nasl 5505 2017-03-07 10:00:18...

[SECURITY] [DSA 2244-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2244-1 [email protected] http://www.debian.org/security/ Florian Weimer May 27, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2237-2] apr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2237-2 [email protected] http://www.debian.org/security/ Stefan Fritsch May 21, 2011 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.ecosse-peugeot.co.uk

Security researcher Ma3sTr0-Dz, has submitted on 21/05/2011 a cross-site-scripting XSS vulnerability affecting www.ecosse-peugeot.co.uk, which at the time of submission ranked 3767128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. ...

CVE-2011-2148

Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & ampersand character, and 1 an STTTState cookie, 2 the ctl00%24MPH%24txtAdminNewPasswordSettingText parameter, 3 the...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise MRG 1.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Unfixed XSS vulnerability at www.125mashhad.ir

Security researcher Black Hat Group, has submitted on 05/07/2011 a cross-site-scripting XSS vulnerability affecting www.125mashhad.ir, which at the time of submission ranked 4359766 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/05/2012. It...

Google Fixes More Than 25 Bugs in Chrome, Pays $16,500 in Bounties

Google has released another new version of Chrome that fixes a total of 27 different bugs on various platforms. The company paid out $16,500 in bounties to researchers for the vulnerabilities they reported, including one $3,000 payment for a high-severity bug. The new version of Chrome, version...

[SECURITY] [DSA 2224-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2224-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2223-1] doctrine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2223-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.fortguard.com

Security researcher flexxpoint, has submitted on 04/11/2011 a cross-site-scripting XSS vulnerability affecting www.fortguard.com, which at the time of submission ranked 2222166 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Autonics Corporation Websites Vulnerable to Remote File Download

Exploit for php platform in category web applications Title : Autonics Corporation Websites Vulnerable to Remote File Download Found by : p0pc0rn Dork : inurl:"download.php?bocode=data" POC --- http://site.com/board/download.php?bocode=data&filename=remote file download thanks, -p0pc0rn- 0day.tod...

Unfixed XSS vulnerability at clibrary.um.ac.ir

Security researcher Arash Allebrahim, has submitted on 04/02/2011 a cross-site-scripting XSS vulnerability affecting clibrary.um.ac.ir, which at the time of submission ranked 19462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It ...