Critical: Red Hat Security Advisory: firefox security and bug fix update

Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

JVN#93406632: Redmine vulnerable to cross-site scripting

Redmine is a project management software. Redmine contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affecte...

Jenkins vulnerable to cross-site scripting

Overview Jenkins contains a cross-site scripting vulnerability. Jenkins is a continuous integration CI tool. Note that this vulnerability is different from JVN14791558. Minoru Sakai of SCSK Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Fedora Update for firefox FEDORA-2012-1606

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2012-1606 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

JVN#14791558: Jenkins vulnerable to cross-site scripting

Jenkins is a continuous integration CI tool. Jenkins contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN79950061. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according...

JVN#79950061: Jenkins vulnerable to cross-site scripting

Jenkins is a continuous integration CI tool. Jenkins contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN14791558. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according...

Fedora Update for uzbl FEDORA-2012-2364

Check for the Version of uzbl OpenVAS Vulnerability Test Fedora Update for uzbl FEDORA-2012-2364 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: uzbl-0-0.28.20111001git9576f59f05.fc16

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Google Chrome 17.0.963.65之前版本存在多个安全漏洞

CVE-2011-3031 CVE-2011-3032 CVE-2011-3033 CVE-2011-3034 CVE-2011-3035 CVE-2011-3036 CVE-2011-3037 CVE-2011-3038 CVE-2011-3039 CVE-2011-3040 CVE-2011-3041 CVE-2011-3042 CVE-2011-3043 CVE-2011-3044 Google Chrome是一款开源的WEB浏览器。 Google Chrome存在多个安全漏洞，允许恶意用户利用漏洞进行跨站脚本，绕过安全限制，执行任意代码等攻击。 1v8 element...

Sepehr-Team Open Redirect

Exploit Title: Sepehr-Team Open Redirect Vulnerability Date: 03.03.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ http://www.sepehr-team.org/forums/go.php?url=http://packetstormsecurity.org/...

Tender Knowledge Base Cross Site Scripting

Exploit Title: Tender Knowledge Base Cross Site Scripting Date: 3.03.2012 Author: Sony Software Link: http://tenderapp.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/03/tender-knowledge-base-cross-site.html...

[SECURITY] Fedora 17 Update: uzbl-0-0.28.20111001git9576f59f05.fc17

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

AliveChat Cross Site Scripting

Exploit Title: AliveChat Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: http://www.websitealive.com/ Google Dorks: inurl:https://www.websitealive1.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

WonderDesk Cross Site Scripting

Exploit Title: WonderDesk Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.wonderdesk.com/ Google Dorks: inurl:wonderdesk.cgi?do Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html...

Bontq Cross Site Scripting

Exploit Title: Bontq Cross Site Scripting Date: 24.02.2012 Author: Sony Software Link: http://www.bontq.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/bontq-cross-site-scripting.html...

XSS Vulnerabilities in JIRA Attachments?

At the current moment, JIRA do not have any restrictions for attachment files, which allows users to upload malicious file into JIRA issues. This can be a problem when we open an attachments using Mozilla Firefox, since the browser allows us to open attachments using web browser. The steps to...

JVN#49836527: Movable Type vulnerable to cross-site scripting

mt-wizard.cgi and Movable Type templates contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version of each product according to the information provided by the developer. Products...

Unity 3D Web Player 3.2.0.61061 - Denial of Service

Luigi Auriemma Application: Unity 3D web player http://unity3d.com/webplayer/ Versions: = 3.2.0.61061 Platforms: Windows Bug: heap corruption Exploitation: remote Date: 21 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Firefox < 10.0.2 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Firefox is earlier than 10.0.2 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execute arbitrar...