nodejs: DiffieHellman do not generate keys after setting a private key

A vulnerability has been identified in the Node.js, where a generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has been set yet...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

Kaspersky Internet Security 2013 - Denial of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...

Kaspersky Internet Security 2013 Denial Of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...

Unfixed XSS vulnerability at www.bull.co.il

Security researcher Codeshift3r, has submitted on 16/12/2011 a cross-site-scripting XSS vulnerability affecting www.bull.co.il, which at the time of submission ranked 18117742 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

Unfixed XSS vulnerability at amanda.zmanda.com

Security researcher MHG, has submitted on 17/10/2009 a cross-site-scripting XSS vulnerability affecting amanda.zmanda.com, which at the time of submission ranked 70294 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...

FreeBSD 7.2-RELEASE SCTP Local Kernel Denial of Service Exploit

Exploit for freebsd platform in category dos / poc =============================================================== FreeBSD 7.2-RELEASE SCTP Local Kernel Denial of Service Exploit =============================================================== / fbsd-sctp-panic.c freebsd 7.2-RELEASE SCTP local...

FreeBSD 7.2-RELEASE SCTP Local Kernel Denial of Service Exploit

No description provided by source. / fbsd-sctp-panic.c freebsd 7.2-RELEASE SCTP local kernel DoS kern panic only tested on 7.2-RELEASE, probably older and newer builds are vuln. as well based on an unfixed bug found here: http://www.freebsd.org/cgi/query-pr.cgi?pr=136803 by Shaun Colley...

Unfixed XSS vulnerability at websrv01.kidshealth.org

Security researcher XSSLotion, has submitted on 07/10/2009 a cross-site-scripting XSS vulnerability affecting websrv01.kidshealth.org, which at the time of submission ranked 3975 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities ===========================================================...

Unfixed XSS vulnerability at www.seventhsanctum.com

Security researcher PaPPy, has submitted on 11/10/2008 a cross-site-scripting XSS vulnerability affecting www.seventhsanctum.com, which at the time of submission ranked 73605 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.xboxliveclans.com

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.xboxliveclans.com, which at the time of submission ranked 602177 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/03/2008. It is...

Unfixed XSS vulnerability at ozgonewild.com

Security researcher PaPPy, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting ozgonewild.com, which at the time of submission ranked 4005103 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currently...

Unfixed XSS vulnerability at www.pdashop.nl

Security researcher Lalapanzi, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.pdashop.nl, which at the time of submission ranked 66003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2009. It is current...

Unfixed XSS vulnerability at www.redbolivia.com

Security researcher Norehem, has submitted on 31/03/2008 a cross-site-scripting XSS vulnerability affecting www.redbolivia.com, which at the time of submission ranked 800312 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is...

Unfixed XSS vulnerability at www.andritz.com

Security researcher Fabian Fingerle, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.andritz.com, which at the time of submission ranked 467524 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...

Unfixed XSS vulnerability at www.stressballexpress.co.uk

Security researcher TreX, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.stressballexpress.co.uk, which at the time of submission ranked 3473994 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It ...

Unfixed XSS vulnerability at www.adresimegelsin.com

Security researcher gencorhangazi.com, has submitted on 26/07/2007 a cross-site-scripting XSS vulnerability affecting www.adresimegelsin.com, which at the time of submission ranked 1474357 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at rock.geosociety.org

Security researcher MaXWeL, has submitted on 16/05/2007 a cross-site-scripting XSS vulnerability affecting rock.geosociety.org, which at the time of submission ranked 348708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/05/2007. It is...

Unfixed XSS vulnerability at vetlandatorget.se

Security researcher Uber0n, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting vetlandatorget.se, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is currently...