Huawei routers multiple security vulnerabilities

XSS, CSRF, DoS, unsafe data transfer, RCE...

xen security and bug fix update

3.0.3-64.el52.9 - More fixes for Xenstore unsafe data access CVE-2008-4405, rhbz 464817 - Fix block-detach regression due to CVE-2008-4405, rhbz 473882 3.0.3-64.el52.8 - Remove unneccessary patch & rebuild 3.0.3-64.el52.7 - Fix reboots after CVE-2008-4405 changes rhbz 471588 3.0.3-64.el52.6 -...

FreeBSD : plone -- unsafe data interpreted as pickles (ffba6ab0-90b5-11dc-9835-003048705d5a)

Plone projectreports : This hotfix corrects a vulnerability in the statusmessages and linkintegrity modules, where unsafe network data was interpreted as python pickles. This allows an attacker to run arbitrary python code within the Zope/Plone process. %NASLMINLEVEL 70300 C Tenable Network...

Multiple vulnerability scanners cross application scripting

Unsafe data obtained during remote host scan is passed to Internet Explorer...

photopost50rc3.txt

PhotoPost 5.0RC3, All Enthusiast, Inc, multiple vulnerabilities March 05 2005 For your consideration. 1. BACKGROUND PhotoPost is a popular commercial image publishing software. Everyone loves showing off their photos! Add PhotoPost to your site, or let us install it for you, and your visitors wil...

Pavuk HTTP Location header overflow

When pavuk sends a request to a web server and the server sends back the HTTP status code 305 Use Proxy, pavuk copies data from the HTTP Location header in an unsafe manner. This leads to a stack-based buffer overflow with control over EIP...