Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

Empire cms backstage to get a shell vulnerability and fix-vulnerability warning-the black bar safety net

The first method: add a custom page 6.0 on experiment success Template management - add custom page - page name casually--file name: xx. asp;. html--the page content--pony copy the contents into it Save the post and then the Admin page Click you can go see your horse, generally in the root...

OrbisCMS-1.0.2 Add Admin User CSRF

Exploit for php platform in category web applications ================================== OrbisCMS-1.0.2 CSRF Add Admin User ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

[SECURITY] [DSA-2106-2] New xulrunner packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2106-2 [email protected] http://www.debian.org/security/ Stefan Fritsch September 19, 2010 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.wintic.it

Security researcher sKoRe2o4, has submitted on 18/09/2010 a cross-site-scripting XSS vulnerability affecting www.wintic.it, which at the time of submission ranked 379855 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currentl...

CVE-2010-3412

Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...

RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...

Unfixed XSS vulnerability at phome.net

Security researcher Wong Chieh Yie, has submitted on 09/11/2010 a cross-site-scripting XSS vulnerability affecting phome.net, which at the time of submission ranked 6559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed XSS vulnerability at www.seatdata.com

Security researcher surbo, has submitted on 09/09/2010 a cross-site-scripting XSS vulnerability affecting www.seatdata.com, which at the time of submission ranked 243573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currentl...

CVE-2010-3247

Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences...

Unfixed XSS vulnerability at www.sohohotel.com

Security researcher nullbyt3, has submitted on 25/08/2010 a cross-site-scripting XSS vulnerability affecting www.sohohotel.com, which at the time of submission ranked 192013 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

Unfixed XSS vulnerability at www.ine.pt

Security researcher Juza, has submitted on 16/08/2010 a cross-site-scripting XSS vulnerability affecting www.ine.pt, which at the time of submission ranked 144137 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...

PT-2010-4309 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.2 before 7.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 before 8.05.15 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.1...

Unfixed XSS vulnerability at www.ocexcelsior.com

Security researcher Devek, has submitted on 27/07/2010 a cross-site-scripting XSS vulnerability affecting www.ocexcelsior.com, which at the time of submission ranked 2313948 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2072-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 19, 2010 http://www.debian.org/security/faq -...

Google Chrome 5.0.375.99更新修复多个安全漏洞

BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...

CVE-2010-2630

Affected software: LibTIFF 3.9.0. Vulnerability: TIFFReadDirectory fails to properly validate the data types of codec-specific TIFF tags with an out-of-order position in a TIFF file. Impact: remote denial of service (application crash) via a crafted TIFF image. Root cause: insufficient validation...

CVE-2010-2630

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than...

Unfixed XSS vulnerability at www.itmaasia.com

Security researcher k3vin mitnick, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting www.itmaasia.com, which at the time of submission ranked 1154265 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is...