Уязвимости в LIOOSYS CMS

Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Information Leakage уязвимостях в LIOOSYS CMS. Это польская коммерческая CMS. SQL Injection WASC-19: http://site/index.php?id=-120union20select201,version,3,4,5/ Information Leakage WASC-13: http://site/files/db.log Утечка лога ошибок запросов к...

Fedora 17 : boost-1.48.0-13.fc17 (2012-9818)

This update fixes a bug in Boost.Pool, which could under certain circumstances overflow allocated chunk size. This could have security implications for applications that use Boost pool without sanitizing pool parameters. - Boost.Locale library now contains backend code, which was left out before...

RSA SecurIDs Get Cracked In 13 Minutes

RSA SecurIDs Get Cracked In 13 Minutes Major corporations, government agencies, and small businesses all hand out RSA SecurID fob keychains to employees so that they can log in to their systems for security reasons and If you're used to seeing a device like this on a daily basis, you probably...

Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)

Wyse - Machine Remote Power Off Denial of Service Metasploit require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' =...

Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)

require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' = Msf::Exploit::Stance::Aggressive, 'Author' = '[email protected]',...

Firefox 13 Fixes Seven Security Vulnerabilities

Mozilla has fixed seven security vulnerabilities in its flagship Firefox browser, including four critical bugs. The fixes are included in Firefox 13, which was released Tuesday. Firefox 13 will download automatically for most users and be installed once users restart the browser. Among the securi...

CVE-2011-3101

Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products...

CVE-2012-4279

creationtimestamp| type| source ---|---|--- 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18874...

Solaris 10 (sparc) : 139291-02 (deprecated)

SunOS 5.10: pgadmin3 sources patch. Date this patch was last updated by Sun : Apr/13/12 This plugin has been deprecated and either replaced with individual 139291 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

The history of a -probably- 13 years old Oracle bug: TNS Poison

tl;dr - Patch your database ASAP with Oracle Critical Patch Update April 2012. Introduction ------------ The following advisory explains a vulnerability I found in 2008 in all versions of Oracle Database server until very recently. The bug is probably available in any Oracle Database version sinc...

Microsoft Partner Service - Persistent Web Vulnerability

Document Title: =============== Microsoft Partner Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=433 http://www.vulnerability-lab.com/getcontent.php?id=439 MSRC ID: 12209nj Release Date: ============= 2012-04-13...

Pakyu Cenloder Microsoft Remote Desktop Denial Of Service

Exploit for windows platform in category dos / poc Exploit Title: Pakyu Cenloder Date: March 16 2012 Author: BMario Application Link: Microsoft Terminal Services / Remote Desktop Services http://msdn.microsoft.com/en-us/library/aa383015v=vs.85.aspx Version: any Windows version before 13 Mar 2012...

FreeFloat FTP Server TEST Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'FreeFloat FTP Server TEST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the TEST command. , 'Author' = 'KaHPeSeSe' Found bug and wrote the...

MS12-020: Description of the security update for Terminal Server Denial of Service Vulnerability: March 13, 2012

None None...

CVE-2012-0943

creationtimestamp| type| source ---|---|--- 2012-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36966...

CVE-2012-1210

creationtimestamp| type| source ---|---|--- 2012-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36766...

Gentoo Security Advisory GLSA 201201-13 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 201201-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201110-13 (Tor)

The remote host is missing updates announced in advisory GLSA 201110-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Unfixed XSS vulnerability at gogolinks.free.fr

Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting gogolinks.free.fr, which at the time of submission ranked 17371582 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.parcjeandrapeau.com

Security researcher strepo, has submitted on 30/12/2011 a cross-site-scripting XSS vulnerability affecting www.parcjeandrapeau.com, which at the time of submission ranked 1440835 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...