Gentoo Security Advisory GLSA 201110-24 (Squid)

The remote host is missing updates announced in advisory GLSA 201110-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Joomla Component com_rule LFI Vulnerability

No description provided by source. Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

Joomla Rule Local File Inclusion

Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

Joomla Welcome Local File Inclusion

Joomla Component comwelcome LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comwelcome" x Vuln Exploit Report:...

Unfixed XSS vulnerability at elibrary2.eosintl.com

Security researcher Sony, has submitted on 24/01/2012 a cross-site-scripting XSS vulnerability affecting elibrary2.eosintl.com, which at the time of submission ranked 1378082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is...

CVE-2012-0285

creationtimestamp| type| source ---|---|--- 2012-01-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18416...

CVE-2011-2325

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-3514

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastructure SEC JDENET...

CVE-2011-2325

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524...

Update: Zappos Says 24 Million Customers Affected By Data Breach

UPDATE: Online retailer Zappos said that its network has been compromised and attackers were able to access personal information belonging to more than 24 million of its customers. Zappos said that its database that contains customers’ credit card numbers was not compromised, however. “We were...

Fedora 16 : glibc-2.14.90-24.fc16.4 (2011-17386)

Reverts 552960 patch which is causing a variety of problems. - Sun Dec 18 2011 Jeff Law - 2.14.90-24.fc16.3 - Check values from TZ file header 767696 - Handle EAGAIN from FUTEXWAITREQUEUEPI 552960 - Add dist. - Correct return value from pthreadcreate when stack allocation fails. 767746 - Wed Dec ...

Unfixed Frame Redirect vulnerability at deperiodistas.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting deperiodistas.com, which at the time of submission ranked 667889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Redirect vulnerability at calllendar.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Redirect vulnerability affecting calllendar.com, which at the time of submission ranked 26217722 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If...

NGS00137 Patch Notification: Websense Triton 7.6 - Reflected XSS in report management UI

Medium Risk Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a Medium risk vulnerability in Websense Impact: Reflected XSS Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway v7.6 Websense Web Security v7....

NGS00141 Patch Notification: Websense Triton 7.6 - Stored XSS in report management UI

High risk Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a High risk vulnerability in Websense Impact: Stored XSS Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway v7.6 Websense Web Security v7.6...

NGS00140 Patch Notification: Websense Triton 7.6 - Unauthenticated remote command execution as SYSTEM

Critical Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a Critical vulnerability in Websense Impact: Unauthenticated remote command execution as SYSTEM Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

CgCraft LLC Design SQL Injection

Exploit Title: CgCraft LLC Design Sql Injection Vulnerability Date: 24/11/2011 - 18:25 Author: 3spi0n Software Website: http://www.cgcraft.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "site created by cgCraft LLC." $ Demo Sites:...

Unfixed XSS vulnerability at www.dersrehberi.com

Security researcher KandemiR, has submitted on 24/11/2011 a cross-site-scripting XSS vulnerability affecting www.dersrehberi.com, which at the time of submission ranked 1736959 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

CVE-2011-5111

creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36350 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36351...