Unfixed XSS vulnerability at www.tavsanlininsesi.com

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.tavsanlininsesi.com, which at the time of submission ranked 2708356 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. I...

Unfixed XSS vulnerability at www.spacestore.net

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.spacestore.net, which at the time of submission ranked 8170475 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at emulator.mtld.mobi

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting emulator.mtld.mobi, which at the time of submission ranked 29393 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.yritystele.fi

Security researcher Narcoticxs, has submitted on 16/03/2007 a cross-site-scripting XSS vulnerability affecting www.yritystele.fi, which at the time of submission ranked 86071 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.hasansen.av.tr

Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.hasansen.av.tr, which at the time of submission ranked 693734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Unfixed XSS vulnerability at rileychildrenshospital.com

Security researcher MaXWeL, has submitted on 03/06/2007 a cross-site-scripting XSS vulnerability affecting rileychildrenshospital.com, which at the time of submission ranked 735962 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It ...

Unfixed XSS vulnerability at portale.unitn.it

Security researcher Bl4cKM4g1c, has submitted on 02/09/2007 a cross-site-scripting XSS vulnerability affecting portale.unitn.it, which at the time of submission ranked 63532 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

CVE-2006-1529

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the...

Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)

A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...

[SECURITY] [DSA 734-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 734-1 [email protected] http://www.debian.org/security/ Martin Schulze July 5th, 2005 http://www.debian.org/security/faq -...

KLA10270 OSI vulnerability in NetOp

An unspecified vulnerability was found in NetOp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products NetOp CVE list CVE-2004-0950 warning Solution...

CVE-2004-0393

Format string vulnerability in the msg function for rlpr daemon rlprd 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function...

eudora62014.txt

Eudora 6.2 ==6.2.0.14 for Windows was released on 8 Nov 04. The release notes http://www.eudora.com/download/eudora/windows/6.2/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Some cases remai...

[Full-Disclosure] Indigoperl Perledit 1.08

re: http://lists.insecure.org/lists/bugtraq/2003/Jun/0189.html still has unresolved issues with the "new" version 1.08 of Indigoperl's Perledit perledit binds to 0.0.0.0:1956 exploit c: telnet perledithost 1956 READY terminate telnet The instruction at "0x00405430" referenced memory at...

Cacheflow CacheOS 3.1.x4.0.x4.1 - Unresolved Domain Cross-Site Scripting

Cacheflow CacheOS 3.1.x4.0.x4.1 - Unresolved Domain Cross-Site Scripting source: https://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before...

Cacheflow CacheOS 3.1.x/4.0.x/4.1 - Unresolved Domain Cross-Site Scripting

source: https://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before being included in an unresolved host error page. An attacker may constru...

ZoneAlarm Pro's MailSafe

hi2all MailSafe is a feature on ZoneAlarm Pro http://www.zonelabs.com that identifies in e-mail attachments potentially harmful files ex: .exe, .com, .reg, .vbs or others that can be added in this feature configuration, and renames their extension to .zl; at the same time it can show an alarm box...

Advisory for Xitami 2.4d7, 2.5d4

Advisory for Xitami 2.4d7, 2.5d4 Xitami is made by Imatix. Site: http://xitami.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0105 /-|=explanation=|- Xitami is a webserver. It has a denial of service. /-|=who is vulnerable=|- Anyone running Xitami 2.5d4, 2.4d7 and...