CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

Unfixed Redirect vulnerability at vakbarat.index.hu

Security researcher TinKode, has submitted on 16/12/2010 a Redirect vulnerability affecting vakbarat.index.hu, which at the time of submission ranked 1421 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If y...

Unfixed XSS vulnerability at www.qbike.com

Security researcher C0nw0nk, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www.qbike.com, which at the time of submission ranked 712068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

PHP Top Sites Cross Site Scripting / SQL Injection

PHP Top Sites Multiple SQL/XSS Vulnerability Author : kAsvææ | c0de Hunters Name : PHP Top Sites Bug Type : SQL/XSS Version :All Google Dork:"Powered By PHP TopSites" Home Page : http://itop10.net/ You can download it : http://webscripts.softpedia.com/script/Top-Sites/PHP-TopSites-41994.html SQL ...

Unfixed XSS vulnerability at www.alexmarshall.org

Security researcher 03storic, has submitted on 12/09/2010 a cross-site-scripting XSS vulnerability affecting www.alexmarshall.org, which at the time of submission ranked 8531912 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.library.yorku.ca

Security researcher Cir0, has submitted on 24/11/2010 a cross-site-scripting XSS vulnerability affecting www.library.yorku.ca, which at the time of submission ranked 11404 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

CVE-2010-3811

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element attributes...

Unfixed XSS vulnerability at wapgames.digi.com.my

Security researcher Wong Chieh Yie, has submitted on 13/11/2010 a cross-site-scripting XSS vulnerability affecting wapgames.digi.com.my, which at the time of submission ranked 15481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It...

Unfixed XSS vulnerability at gemsafarihawaii.com

Security researcher nullbyt3, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting gemsafarihawaii.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

Zomplog 3.9 Cross Site Scripting

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Unfixed XSS vulnerability at warszawa.adagio4.eu

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting warszawa.adagio4.eu, which at the time of submission ranked 5058573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at budk.com

Security researcher surbo, has submitted on 14/10/2010 a cross-site-scripting XSS vulnerability affecting budk.com, which at the time of submission ranked 43651 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed...

Unfixed XSS vulnerability at www.universcine.com

Security researcher Kokoriko, has submitted on 10/11/2010 a cross-site-scripting XSS vulnerability affecting www.universcine.com, which at the time of submission ranked 419109 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

CVE-2010-3730

CVE-2010-3730 affects Google Chrome prior to 6.0.472.62. The vulnerability arises from improper handling of a document’s origin when managing properties, enabling a remote attacker to induce an unspecified impact via a crafted web site (the so‑called “property pollution”). Publicly documented det...

CVE-2010-3261

Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors...

Unfixed XSS vulnerability at www.telekomadsl.net

Security researcher MURATHOCA, has submitted on 09/07/2010 a cross-site-scripting XSS vulnerability affecting www.telekomadsl.net, which at the time of submission ranked 15619342 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at death.org

Security researcher Uber0n, has submitted on 09/04/2010 a cross-site-scripting XSS vulnerability affecting death.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is currently unfixed. ...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...