Unfixed XSS vulnerability at www.ceramichebibi.com

Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.ceramichebibi.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is currentl...

Unfixed XSS vulnerability at www.cemfi.es

Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.cemfi.es, which at the time of submission ranked 1922229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

Unfixed XSS vulnerability at www.friendlycanadian.com

Security researcher MaXWeL, has submitted on 01/03/2007 a cross-site-scripting XSS vulnerability affecting www.friendlycanadian.com, which at the time of submission ranked 226723 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...

[SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1231-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 9th, 2006 http://www.debian.org/security/faq -...

a-ConMan 3.2b - common.inc.php Remote File Inclusion

a-ConMan 3.2b - common.inc.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...

PT-2006-6457 · Ariadne · Ariadne

Name of the Vulnerable Software and Affected Versions: Ariadne version 2.4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the ariadne parameter in specific PHP files, including "ftp/loader.php" and "lib/includes/loader.cmd.php". Recommendations: For Ariadne...

[SECURITY] [DSA 1201-1] New ethereal packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1201-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2006 http://www.debian.org/security/faq -...

Debian DSA-1111-2 : kernel-source-2.6.8 - race condition

It was discovered that a race condition in the process filesystem can lead to privilege escalation. The following matrix explains which kernel version for which architecture fixes the problem mentioned above : Debian 3.1 sarge Source 2.6.8-16sarge4 Alpha architecture 2.6.8-16sarge4 AMD64...

ICQ 2003 buffer overflow

Heap buffer overflow on specific messages parsing...

[Full-disclosure] [SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1158-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 25th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2006 http://www.debian.org/security/faq -...

Sending multipart/form-data requests from Flash (with arbitrary headers)

Hello lists, In my original "Forging HTTP request headers with Flash" paper http://www.securityfocus.com/archive/1/441014, I mentioned forcing multipart/form-data input format to ensure that Flash's LoadVars isn't used to forge the request. However, there's a work-around for the attacker - using...

CVE-2005-2530: Undefined Security Weakness

Unspecified vulnerability in Java 1.3.1 before 1.3.116 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."...

[SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1140-1 [email protected] http://www.debian.org/security/ Martin Schulze August 3rd, 2006 http://www.debian.org/security/faq -...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

Juniper JunOS IPv6 DoS

Memory leak on specific IPv6 packet processing...

[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1084-1 [email protected] http://www.debian.org/security/ Steve Kemp May 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1069-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...