kernel: fs/partitions: Validate map_count in Mac partition tables

Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...

MyBloggie 2.1.6 - HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

gimp security update

2.0.5-7.0.7.el4.1 - unfuzz validate-size-values patch - don't use Prereq - fix various overflows 537356, 689831, 703403, 703407, 704512...

Hashbot - Forensic web tool to acquire and validate the web pages !

What is hashbot? Hashbot is a forensic web tool to acquire and validate, over time, the status of an individual web page or web document. Feature : Acquire Follow these steps to acquire a web document: 1. Insert the document's URL ie: https://www.evilwebpage.com/image.jpg or...

Unfixed XSS vulnerability at www.itembank.co.kr

Security researcher d3vbit3, has submitted on 13/05/2011 a cross-site-scripting XSS vulnerability affecting www.itembank.co.kr, which at the time of submission ranked 2649417 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at www.pikeplacemarket.org

Security researcher P0W3RFU7, has submitted on 14/03/2011 a cross-site-scripting XSS vulnerability affecting www.pikeplacemarket.org, which at the time of submission ranked 542873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It i...

Unfixed XSS vulnerability at liberdadenautica.com.br

Security researcher Jinny, has submitted on 14/02/2011 a cross-site-scripting XSS vulnerability affecting liberdadenautica.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It is...

Unfixed Redirect vulnerability at sossigns.com

Security researcher SeeMe, has submitted on 01/06/2011 a Redirect vulnerability affecting sossigns.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed. If you believe...

Unfixed XSS vulnerability at www.alwaysangels.com

Security researcher Sony, has submitted on 23/07/2010 a cross-site-scripting XSS vulnerability affecting www.alwaysangels.com, which at the time of submission ranked 12096354 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is...

Fedora Update for mod_auth_shadow FEDORA-2010-6359

Check for the Version of modauthshadow OpenVAS Vulnerability Test Fedora Update for modauthshadow FEDORA-2010-6359 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for mod_auth_shadow FEDORA-2010-6323

Check for the Version of modauthshadow OpenVAS Vulnerability Test Fedora Update for modauthshadow FEDORA-2010-6323 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 12 Update: mod_auth_shadow-2.2-8.fc12

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody". modauthshadow addresses this difficulty by opening a pipe to an suid root...

jQuery Validate 1.6.0 Demo Code Advisory

+----------------------------------------------+ ADVISORY – jQuery Validate 1.6.0 Demo Code AFFECTED PACKAGES jQuery Validate 1.6.0 SilverStripe 2.3.X to 2.3.5 Discovered By CodeScan.com +----------------------------------------------+ Vendor's Website:...

jQuery Validate 1.6.0 Cross Site Scripting

+----------------------------------------------+ ADVISORY – jQuery Validate 1.6.0 Demo Code AFFECTED PACKAGES jQuery Validate 1.6.0 SilverStripe 2.3.X to 2.3.5 Discovered By CodeScan.com +----------------------------------------------+ Vendor's Website:...

Unfixed XSS vulnerability at www.riks-stroke.org

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.riks-stroke.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currently...

Unfixed XSS vulnerability at www.atlant.by

Security researcher Dark.Man, has submitted on 28/08/2009 a cross-site-scripting XSS vulnerability affecting www.atlant.by, which at the time of submission ranked 379507 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currentl...

Apple MACOS X xnu <= 1228.9.59 Local Kernel Root Exploit

No description provided by source. / xnu-workq-v2-64.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.9.59 local kernel root exploit by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386...

ShaadiClone 2.0 - addAdminmembercode.php Arbitrary Add Admin

ShaadiClone 2.0 - addAdminmembercode.php Arbitrary Add Admin ShaadiClone v2.0 addadminmembercode.php Add Admin function validateform ifform.name.value == "" || !isNaNform.username.value alert"Please enter your name correctly."; form.username.focus; return false; ifform.name.value == "" ||...

VisionLMS 1.0 (changePW.php) Remote Password Change Exploit

No description provided by source. html head titleVisionLMS 1.0 | Change Password/title p VisionLMS 1.0 Remote Password Changebr Coded by Mr.tro0oqybr E-mail [email protected] --- Yemeni hackerbr Greetz All my Friendsbr /p form enctype="multipart/form-data" method="post" name="form"...

[Suspected Spam][Fwd: Re: Novell-QuickFinder Server Xss & Java remote execution Code]

NULL CODE SERVICES www.nullcode.com.ar Hunting Security Bugs! +================================================================================================================================+ + Novell-QuickFinder Server //Cross-site scripting XSS Remote Java Execution Code +...