Wordl Recipe 2.11 Cross Site Scripting

Armorize Technologies Security Advisory Armorize-ADV-2008-0001 Title: Multiple XSS Vulnerabilities in World Recipe 2.11 Date: 2008/12/15 Status: Full Class: Input Validation Error Bugtraq ID: N/A Category: Cross Site Scripting Language: ASP.NET C Description Armorize-ADV-2008-0001 discloses...

Multiple XSS Vulnerabilities in World Recipe 2.11

Armorize Technologies Security Advisory Armorize-ADV-2008-0001 Title: Multiple XSS Vulnerabilities in World Recipe 2.11 Date: 2008/12/15 Status: Full Class: Input Validation Error Bugtraq ID: N/A Category: Cross Site Scripting Language: ASP.NET C Description Armorize-ADV-2008-0001 discloses...

openSUSE 10 Security Update : valgrind (valgrind-5809)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there CVE-2008-4865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

世界之窗(The World)浏览器地址栏欺骗漏洞

No description provided by source. +++++++++++++++++++++++++++++++++++++++++ 新打开的链接，地址栏是http://www.baidu.com 内容却是被人恶意控制的 Baidu function win x=window.open'http://www.baidu.com'; x.location="about:Baidu要过冬了其实80sec说了也不算数了......document.title="Hacked By 80sec"";...

FreeBSD : emacs -- run-python vulnerability (66657bd5-ac92-11dd-b541-001f3b19d541)

Emacs developers report : The Emacs command run-python' launches an interactive Python interpreter. After the Python process starts up, Emacs automatically sends it the line : import emacs which normally imports a script named emacs.py which is distributed with Emacs. This script, which is...

Chilkat Crypt - ActiveX Arbitrary File CreationExecution

Chilkat Crypt - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID:...

DEBIAN-CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

Design/Logic Flaw

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

Linux Kernel < 2.6.22 - 'ftruncate()'/'open()' Local Privilege Escalation

/ gw-ftrex.c: Linux kernel bug information: http://osvdb.org/49081 !!!This is for educational purposes only!!! To use it, you've got to find a sgid directory you've got permissions to write into obviously world-writable, e.g: find / -perm -2000 -type d 2/dev/null|xargs ls -ld|grep "rwx" which...

CVE-2008-4521

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...

Sql injection

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...

CVE-2008-4521

The CVE-2008-4521 issue affects the World of Warcraft tracker Infusion module (raidtracker_panel) for PHP-Fusion, with a vulnerability in the thisraidprogress.php script. The underlying flaw is SQL injection triggered by the INFO_RAID_ID parameter, enabling remote attackers to manipulate the data...

CVE-2008-4521

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...

Gentoo Security Advisory GLSA 200409-10 (multi-gnome-terminal)

The remote host is missing updates announced in advisory GLSA 200409-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200510-13 (spe)

The remote host is missing updates announced in advisory GLSA 200510-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-10 (multi-gnome-terminal)

The remote host is missing updates announced in advisory GLSA 200409-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Tor World CGI scripts vulnerable to arbitrary script execution

Overview Multiple Tor World CGI scripts contain a vulnerability which may allow an arbitrary script execution. Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to...

wan-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...