Workbox (Notifications and Tasks) leaks restricted information from a jira issue

If a confluence instance is configured to pull notifications from a JIRA server then if a user 'B' not in group 'A' watches an issue and a comment is added to the issue restricted to group 'A' then user 'B' is able to see the contents of the restricted comment via the "Notifications and Tasks"...

Workbox (Notifications and Tasks) leaks restricted information from a jira issue

If a confluence instance is configured to pull notifications from a JIRA server then if a user 'B' not in group 'A' watches an issue and a comment is added to the issue restricted to group 'A' then user 'B' is able to see the contents of the restricted comment via the "Notifications and Tasks"...

[JSQL v0.3] Java Tool for Automatic Database Injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.2 features: GET, POST, header, cookie methods normal, error based, blind, time based algorithms automatic...

How to Forcibly Stop Stuck Jobs

Notice of Future Change This article may be retired in the future. As the product has matured, the incidence of jobs or tasks becoming "stuck" has decreased significantly. However, there are instances where a job might be executing a background task, giving the appearance that it has become stuck...

Inside the 1,000 Red October Cyberespionage Malware Modules

The Red October espionage malware campaign is providing security researchers with a deep dive into the complexity of targeted attacks, which in this case made use of more than 1,000 malware modules for everything from reconnaissance on targets to exfiltration of data to command and control server...

Fedora Update for thunderbird-lightning FEDORA-2012-18661

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-18661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for thunderbird-lightning FEDORA-2012-18683

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-18683 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 17 Update: bcfg2-1.2.3-1.fc17

Bcfg2 helps system administrators produce a consistent, reproducible, and verifiable description of their environment, and offers visualization and reporting tools to aid in day-to-day administrative tasks. It is the fifth generation of configuration management tools developed in the Mathematics...

Fedora Update for ruby FEDORA-2012-16086

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2012-16086 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 16 Update: ruby-1.8.7.358-4.fc16

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Fedora Update for thunderbird-lightning FEDORA-2012-15863

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-15863 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

CVE-2012-4393: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

Fedora Update for thunderbird-lightning FEDORA-2012-12892

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-12892 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for thunderbird-lightning FEDORA-2012-10799

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-10799 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for thunderbird-lightning FEDORA-2012-9001

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-9001 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

WEBTASK SQL injection and fix-vulnerability warning-the black bar safety net

Author: phiA Test system:: BackTrack 5 Example: http://www.revistapenseleve.com.br/exibe.php?id=1395%27 SQLi http://www.reporterbrasil.com.br/exibe.php?id=22%27 SQLi http://www.penseleve.com.br/exibe.php?id=1575%27 SQLi many more @ google ! Solution: Filter exibe. php id=input parameters...

Fedora Update for thunderbird-lightning FEDORA-2012-9079

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-9079 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Knight cms injection, and the background to get shell-vulnerability warning-the black bar safety net

0x1 arbitrary user login 0x2 blind 0x3 background holding shell 0x4 random function problem Detailed description: 0x1 arbitrary user login user/login.php elseifempty$SESSION'uid' || empty$SESSION'username' || empty$SESSION'utype' && $COOKIE'QS''username' && $COOKIE'QS''password' && $COOKIE'QS''ui...

[SECURITY] Fedora 15 Update: thunderbird-lightning-1.2-1.fc15

Lightning brings the Sunbird calendar to the popular email client, Mozilla Thunderbird. Since it's an extension, Lightning is tightly integrated with Thunderbird, allowing it to easily perform email-related calendaring tasks...