DEBIAN-CVE-2009-0153

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

SA-CONTRIB-2009-028 - Feed Block - Cross Site Scripting

The Feed Block module creates a block with one externalsyndicated article for each feed source from selected feed category. Feed block doesn't properly escapes aggregator items allowing users with administer news feeds permission to inject arbitrary code into the site. Such a cross site scripting...

Google Chrome XSS Vulnerability

The host is installed with Google Chrome and is prone to XSS vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromexssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Google Chrome XSS Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

SA-CONTRIB-2009-022 - Exif - Cross Site Scripting

The Exif module enables users to display EXIF tags in images on the site. EXIF tags are not properly filtered for HTML input, allowing users with permission to upload images to inject arbitrary code into the site using a specially crafted image. Such a cross site scripting XSS attack may lead to ...

jar: scheme ignores the content-disposition: header on the inner URI

The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting XSS attacks and possibly other attacks via an uploaded .jar file with a...

Firefox allows Refresh header to redirect to javascript: URIs — Mozilla

Mozilla community member Michael reported that when a server responds with a Refresh header containing a javascript: URI, Firefox will redirect to the javascript: URI. If an attacker could inject a Refresh header into a server response, or could control the value that a site places in the Refresh...

SA-CONTRIB-2009-020 - Print - Cross site scripting

The Printer, e-mail and PDF versions "Print" module provides printer-friendly versions of content. The module does not correctly escape content titles, enabling malicious users to insert arbitrary HTML and scripts into certain pages. Such a cross site scripting XSS attack against sufficiently...

Openfire Multiple Vulnerabilities (Mar09)

This host is running Openfire and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopenfiremultvulnmar09.nasl 5122 2017-01-27 12:16:00Z teissa $ Openfire Multiple Vulnerabilities Mar09 Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

Ubuntu Update for awstats vulnerability USN-686-1

Ubuntu Update for Linux kernel vulnerabilities USN-686-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6861.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for awstats vulnerability USN-686-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Horde IMP Webmail客户端跨站脚本和HTML注入漏洞

BUGTRAQ ID: 33492 CVECAN ID: CVE-2009-0930 IMP是一款基于Web的强大的邮件程序，由Horde项目组开发，可使用在Linux/Unix或者Windows操作系统下。 IMP没有正确地过滤对smime.php、pgp.php和message.php模块的输入参数便返回给了用户，远程攻击者可以通过向这些模块提交恶意请求执行跨站脚本和HTML注入攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Horde IMP 4.3.x Horde IMP 4.2.x 厂商补丁： Horde -----...

Sun Java System Messenger Express XSS

Product:Sun Javatm System Messenger Express Version: 6.3-0.15 Author:syniack contact:[email protected] Vulnerable link: http://example.com/?user=admin&error="alert1; -- SyN/AcK RuLzZ...

Firefox's Charset Remembering strikes back

Здравствуйте 3APA3A! Сообщаю вам об изобретении мною новой атаки с использованием Charset Remembering уязвимости в Mozilla Firefox. Ранее я сообщал о Charset Remembering уязвимости в Mozilla Firefox http://websecurity.com.ua/2848/. Как я писал у себя на сайте, Mozilla отчасти исправила уязвимость...

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

No description provided by source. XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its we...

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

Optus/Huawei E960 HSDPA Router - Sms Cross-Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Ignite Realtime OpenFire Multiple Vulnerabilities

This host is running OpenFire and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenfiremultvuln.nasl 5676 2017-03-22 16:29:37Z cfi $ Ignite Realtime OpenFire Multiple Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

SecurityFocus.com Cross Site Scripting

Original Advisory http://www.dsecrg.com/pages/vul/show.php?id=63 Digital Security Research Group DSecRG Advisory DSECRG-09-007 Application: SecurityFocus.com Vendor URL: http://www.securityfocus.com Bugs: XSS Exploits: YES Reported: 21.01.2009 Vendor response: none Second report: 23.01.2009 Vendo...

SuSE Update for MozillaFirefox SUSE-SA:2008:034

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse2008034.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for MozillaFirefox SUSE-SA:2008:034 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...