CVE-2013-1743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as...

Fedora Update for libXvMC FEDORA-2013-12593

Check for the Version of libXvMC OpenVAS Vulnerability Test Fedora Update for libXvMC FEDORA-2013-12593 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Directory traversal

Directory traversal vulnerability in the cgitparsereadme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...

Fedora Update for kgeography FEDORA-2013-13499

Check for the Version of kgeography OpenVAS Vulnerability Test Fedora Update for kgeography FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for nodejs-oauth-sign FEDORA-2013-11780

Check for the Version of nodejs-oauth-sign OpenVAS Vulnerability Test Fedora Update for nodejs-oauth-sign FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 17 : python-pip-1.3.1-4.fc17 (2013-13213)

Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...

Fedora 19 : python-pip-1.3.1-4.fc19 (2013-13216)

Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...

Fedora Update for php-geshi FEDORA-2013-5472

Check for the Version of php-geshi OpenVAS Vulnerability Test Fedora Update for php-geshi FEDORA-2013-5472 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

The PCI DSS Cloud Computing Guidelines: An Executive Summary

The PCI SSC and its Cloud Special Interest Group has released its Cloud Computing Guidelines after a year of collaboration and input from SIG members. Coalfire was a big contributor to this document, and we think it is required reading for anyone who has front-line responsibility for managing...

Fedora Update for clamav FEDORA-2013-4818

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2013-4818 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

DCMS 2.4 Cross Site Scripting

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Exploit Title: DCMS v2.4 Cms Cross Site Scripting vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.dibagroup.com + Category: Web Application +...

Customized variables whose values are hidden passwords are unmasked revealing the password in the build summary

Step to replicate Create two variables passworder and Passworder notice p with caps Run a customize build overridden the contents of the field While the fields remains hidden in the metadata as expected, the variable with capital P has it values revealed in the build summary see screenshot...

Customized variables whose values are hidden passwords are unmasked revealing the password in the build summary

Step to replicate Create two variables passworder and Passworder notice p with caps Run a customize build overridden the contents of the field While the fields remains hidden in the metadata as expected, the variable with capital P has it values revealed in the build summary see screenshot...

FreeBSD Ports: drupal7

The remote host is missing an update to the system as announced in the referenced advisory. VID 2adc3e78-22d1-11e2-b9f0-d0df9acfd7e5 OpenVAS Vulnerability Test $ Description: Auto generated from VID 2adc3e78-22d1-11e2-b9f0-d0df9acfd7e5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Mozilla Firefox Code Execution Vulnerabilities - November12 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcodeexecvulnnov12win.nasl 5999 2017-04-21 09:02:32Z teissa $ Mozilla Firefox Code Execution Vulnerabilities - November12 Windows Authors: Rachana...

akcms code execution vulnerability-vulnerability warning-the black bar safety net

Last week digging out of the akcms background stencil getshell feeling nothing new, and then carefully looked at the code, found a comparison with“the future”of the hole, the code execution vulnerability, and the problem function is that the authors provided to the station user for secondary...

Slackware Advisory SSA:2009-306-01 mozilla-firefox

The remote host is missing an update as announced via advisory SSA:2009-306-01. OpenVAS Vulnerability Test $Id: esoftslkssa200930601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Appeals Court Calls Bank's Security "Commercially Unreasonable"

The United States Court of Appeals on Tuesday reversed a lower court’s decision, ruling that the IT security system used by a domestic bank was not “commercially reasonable” to protect its customers. The ruling PDF, in the case of People’s United Bank formerly Ocean Bank of Maine versus Patco...

Debian Security Advisory DSA 2476-1 (pidgin-otr)

The remote host is missing an update to pidgin-otr announced via advisory DSA 2476-1. OpenVAS Vulnerability Test $Id: deb24761.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2476-1 pidgin-otr Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora Update for grub2 FEDORA-2012-7579

Check for the Version of grub2 OpenVAS Vulnerability Test Fedora Update for grub2 FEDORA-2012-7579 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...