FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

DEBIAN-CVE-2008-3881

Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...

CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass Advisory Information Title: Internet Explorer Zone Elevation Restrictions...

CVE-2008-1448

The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...

Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass

Advisory ID Internal CORE-2008-0103 Advisory Information Title: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass Advisory ID: CORE-2008-0103 Date published: 2008-08-13 Date of last update: 2008-08-12 Vendors contacted: Microsoft Release mode: Coordinated...

CVE-2008-1448

The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

Code injection

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3648

The nslookup.exe utility in Microsoft Windows XP SP2 is vulnerable to a Remote Code Execution (RCE) flaw. This vulnerability allows user-assisted remote attackers to execute arbitrary code, a condition demonstrated via an attempted DNS zone transfer . The issue is classified under CWE-94: Imprope...

CVE-2008-3648: Improper Control of Generation of Code

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

CVE-2008-3567: Improper Neutralization of Input During Web Page Generation

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

PCI DSS compliance

Binary data pcicompliance.nbin...

Unfixed XSS vulnerability at zone-m.net

Security researcher SeYMeN, has submitted on 08/06/2008 a cross-site-scripting XSS vulnerability affecting zone-m.net, which at the time of submission ranked 1309237 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...

Directory traversal

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

CVE-2008-2876: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the zone parameter...

mUnky 0.0.1 (index.php zone) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== mUnky 0.0.1 index.php zone Local File Inclusion Vulnerability =============================================================== @email protected | mUnky 0.0.1 = Local File...