Unfixed XSS vulnerability at kraloyun.com

Security researcher st@rext, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting kraloyun.com, which at the time of submission ranked 1556 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is currently...

Unfixed XSS vulnerability at r00tshell.com

Security researcher St@rExT, has submitted on 10/07/2007 a cross-site-scripting XSS vulnerability affecting r00tshell.com, which at the time of submission ranked 697534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently...

Unfixed XSS vulnerability at www.suikast.de

Security researcher St@rExT, has submitted on 10/04/2007 a cross-site-scripting XSS vulnerability affecting www.suikast.de, which at the time of submission ranked 231406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is currentl...

Unfixed XSS vulnerability at gnuturk.liderdesign.com

Security researcher St@rExT, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting gnuturk.liderdesign.com, which at the time of submission ranked 2593502 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It i...

Unfixed XSS vulnerability at direksiyon-dersi.net

Security researcher St@rExT, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting direksiyon-dersi.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is current...

Unfixed XSS vulnerability at www.kalbistan.net

Security researcher St@rExT, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.kalbistan.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...

Unfixed XSS vulnerability at webofset.net

Security researcher St@rExT, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting webofset.net, which at the time of submission ranked 1541618 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/03/2007. It is currently...

Unfixed Redirect vulnerability at siyasal.org

Security researcher st@rext, has submitted on 28/09/2007 a Redirect vulnerability affecting siyasal.org, which at the time of submission ranked 1263991 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If you...

Unfixed XSS vulnerability at www.hemencevir.com

Security researcher st@rext, has submitted on 19/09/2007 a cross-site-scripting XSS vulnerability affecting www.hemencevir.com, which at the time of submission ranked 46268 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2007. It is...

Unfixed Script Insertion vulnerability at snappoll.com

Security researcher st@rext, has submitted on 19/09/2007 a Script Insertion vulnerability affecting snappoll.com, which at the time of submission ranked 134183 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.cyberhaber.com

Security researcher st@rext, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.cyberhaber.com, which at the time of submission ranked 439423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It is...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via 1 an empty SIP message or 2 a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553...

CVE-2007-4753

The CVE-2007-4753 family affects the Thomson ST 2030 SIP phone running software 1.52.1. It allows remote DoS (device hang) via SIP message parsing issues: (a) an empty SIP message and (b) a SIP INVITE with a malformed To header, with vectors distinct from CVE-2007-4553. Related CVE-2007-4553 desc...

Unfixed XSS vulnerability at www.suikast.de

Security researcher St@rExT, has submitted on 09/04/2007 a cross-site-scripting XSS vulnerability affecting www.suikast.de, which at the time of submission ranked 231406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2007. It is currentl...

Unfixed XSS vulnerability at www.fotograf.web.tr

Security researcher St@rExT, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.fotograf.web.tr, which at the time of submission ranked 122590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

CVE-2007-4553

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

Thomson ST 2030 SIP phone DoS

Crash on invalid INVITE request Via: and To: headers and also on empty message...

CVE-2007-4553

CVE-2007-4553 affects Thomson ST 2030 SIP phone running software 1.52.1. The issue is a denial-of-service caused by processing a malformed SIP INVITE where the Via header contains a '/' in place of the required space after the SIP version number. This header parsing defect can cause the device to...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...