[SECURITY] Fedora 13 Update: sssd-1.3.0-40.fc13

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Fedora Update for perl-Convert-UUlib FEDORA-2011-0062

Check for the Version of perl-Convert-UUlib OpenVAS Vulnerability Test Fedora Update for perl-Convert-UUlib FEDORA-2011-0062 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-0500

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2011-0500 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

xAjax Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about Cross-Site Scripting and Full path disclosure vulnerabilities in xAjax and xajaxjqueryplugin. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions of xAjax. Vulnerable are all versions of...

Fedora 13 : perl-Convert-UUlib-1.34-1.fc13 (2011-0062)

Perl extension Convert::UUlib 1.34 : - Fix a one-byte-past-end-write buffer overflow in UURepairData reported, analysed and testcase provided by Marco Walther - Quoted-printable decoding was completely broken, try a fix Note that Tenable Network Security has extracted the preceding description...

Уязвимости в xAjax и xajax_jquery_plugin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в xAjax и xajaxjqueryplugin. XSS WASC-08: http://site/cms/’;alertdocument.cookie;/ Это DOM Based XSS. Данная уязвимость в частности имеет место в MC Content Manager которая использует xAjax...

N - 1 3 news 3.4 remote admin add CSRF vulnerability-vulnerability warning-the black bar safety net

EXP: the html head titleRemote Admin Add CSRF Exploit/title /head H2Remote Admin Add CSRF Exploit by qing-Edit/H2 formmethod="POST"name="form0"action="http://localhost/news/admin.php?action=options&mod=accounts&create=new" inputtype="hidden"name="accountname"value="admin" /...

Fedora 13 : wordpress-2.8.6-4.fc13 (2011-0306)

Security fix for HTML sanitation issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-48.1.8.4.fc13 (2011-0500)

Wed Jan 5 2011 Jiri Vanek -1:1.6.0-47.1.8.4.48 - updated to icedtea 1.8.4 - Mon Nov 29 2010 Jiri Vanek -1:1.6.0-46.1.8.3.4 - Resolves: rhbz657491 - Removed Asian and Indic font dependencies. - Fri Nov 19 2010 Jiri Vanek -1:1.6.0-45.1.8.3 - updated to iced tea 1.8.3 - added fonts dependencies -...

[SECURITY] Fedora 13 Update: perl-Convert-UUlib-1.34-1.fc13

A perl interface to the uulib library a.k.a. uudeview/uuenview...

[SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-48.1.8.4.fc13

The OpenJDK runtime environment...

N-13 News 3.4 Remote Admin Add CSRF Exploit

Exploit for php platform in category web applications Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; hack-book.com // GlaDiatOr ; Coffin Of Evil ;The Sword; Cyber-Err0r ; R3d-D3v1L special...

N-13 News 3.4 Cross Site Request Forgery

======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz :...

N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)

N-13 News 3.4 - Cross-Site Request Forgery Admin Add ======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email :...

N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)

======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz :...

MC Content Manager 10.1.1 Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about Cross-Site Scripting, Brute Force and Full path disclosure vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions of MC Content Manage...

Fedora Update for ccid FEDORA-2011-0143

Check for the Version of ccid OpenVAS Vulnerability Test Fedora Update for ccid FEDORA-2011-0143 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for wireshark FEDORA-2011-0167

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-0167 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora 13 : pcsc-lite-1.5.5-5.fc13 (2011-0123)

This update fixes the following security issue : A stack-based buffer overflow flaw was found in the way PC/SC Lite smart card framework decoded certain attribute values of the Answer-to-Reset ATR message, received back from the card after connecting. A local attacker could use this flaw to execu...

Fedora 13 : ccid-1.3.11-2.fc13 (2011-0143)

This update fixes the following security issue : An integer overflow, leading to array index error was found in the way USB CCID Chip/Smart Card Interface Devices driver processed certain values of card serial number. A local attacker could use this flaw to execute arbitrary code, with the...