Re: [Full-disclosure] pidgin OTR information leakage

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jann Horn wrote: > 2012/2/25 Dimitris Glynos : >> Pidgin transmits OTR (off-the-record) conversations over DBUS in >> plaintext. This makes it possible for attackers that have gained >> user-level access on a host, to listen in on private conversat

[AntiSnatchOr] OpenCMS <= 7.5.3 multiple vulnerabilities

OpenCMS <= 7.5.3 multiple vulnerabilities Name: OpenCMS <= 7.5.3 multiple vulnerabilities Systems Affected: OpenCMS <= 7.5.3 Severity: High Vendor: http://www.opencms.org Advisory: http://antisnatchor.com/opencms_7.5.3_multiple_vulnerabilities Author: Michele "antisnatchor" Orru (michele.orr

[AntiSnatchOr] Pentaho Bi-server multiple vulnerabilities

Pentaho 1.7.0.1062 Multiple Vulnerabilities  Name Multiple Vulnerabilities in Pentaho  Systems Affected Pentaho <= 1.7.0.1062  Severity High  Impact (CVSSv2) High 7/10, vector: (AV:N/AC:L/Au:S/C:P/I:C/A:P)  Vendor http://www.pentaho.com  Advisory http://antisnatchor.com/2009/06/20/pentaho-1701062

[AntiSnatchOr] Eclipse BIRT <= 2.2.1 Reflected XSS

Eclipse BIRT <= 2.2.1 Reflected XSS Vendor: Eclipse Advisory: http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss/ Author: Michele "euronymous" Orrù (euronymous AT antisnatchor DOT com) Quite a common problem in a lot of Java based applications: reflected XSS in Java stack trace. A Re