Opera < 10.54 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.54. Such versions are potentially affected by the following issues : - Web fonts may be used to trigger a privilege elevation vulnerability in the Windows operating system MS10-032 954 - It may be possible to use data URIs in a...

Design/Logic Flaw

The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...

Real-Time ASP Calendar SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Real-time ASP Calendar - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

MS Research Targets Multimedia Snooping

Researchers from Microsoft have come up a sensor widget concept that provides alerts and lets users control and monitor exactly what other users see from their webcams, microphones, and other live data streams. Read the full article. Dark Reading...

Cumulus Widget For BlogEngine.NET Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerability in widget Cumulus for BlogEngine.NET. ----------------------------- Advisory: Vulnerability in widget Cumulus for BlogEngine.NET ----------------------------- URL: http://websecurity.com.ua/4184/ -----------------------------...

Vulnerability in widget Cumulus for BlogEngine.NET

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в виджете Cumulus для BlogEngine.NET. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus и других веб приложениях, о которых я уже сообщал, т.к. приложение использует tagcloud.swf созданный автором WP-Cumulus. Про миллион...

Socialware 2.2 - Upload Cross-Site Scripting

Socialware 2.2 - Upload Cross-Site Scripting Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code :...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5515

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5515 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 11 Update: perl-Gtk2-MozEmbed-0.08-6.fc11.10

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 11 Update: hulahop-0.4.9-13.fc11

The hulalop library contains a widget for embedding mozilla. It's based on pyxpcom and give access to the whole mozilla xpcom API through python...

[SECURITY] Fedora 12 Update: perl-Gtk2-MozEmbed-0.08-6.fc12.12

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 13 Update: perl-Gtk2-MozEmbed-0.08-6.fc13.12

This module allows you to use the Mozilla embedding widget from Perl...

CVE-2010-1008

Cross-site scripting XSS vulnerability in the Sellector.com Widget Integration chsellector extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1008

CVE-2010-1008 : A Cross-site Scripting (XSS) vulnerability exists in the Sellector.com Widget Integration (chsellector) extension for TYPO3, prior to version 0.1.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects the TYPO3 integra...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-1936

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-1727

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-1727 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Opera < 10.50 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.50. Such versions are potentially affected by multiple issues : - An error in the TLS protocol when handling session re-negotiations may allow man-in-the-middle attacks. 944 - Widget properties may be exposed to third-party...

[SECURITY] Fedora 12 Update: perl-Gtk2-MozEmbed-0.08-6.fc12.11

This module allows you to use the Mozilla embedding widget from Perl...

[SECURITY] Fedora 11 Update: perl-Gtk2-MozEmbed-0.08-6.fc11.9

This module allows you to use the Mozilla embedding widget from Perl...