glossword 1.8.12 - Multiple Vulnerabilities

glossword 1.8.12 - Multiple Vulnerabilities =================================================== Vulnerable Software: Glossword 1.8.12 Tested version: Glossword 1.8.12 Download: http://sourceforge.net/projects/glossword/files/glossword/1.8.12/ Vulns: XSS && Database Backup Disclosure && CSRF &&...

PRADO 3.2.0 File Disclosure

File disclosure vulnerability in PRADO sr parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

USN-1645-1 : linux-ti-omap4 vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net

Download the exploit file wget http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c 2. Compile gcc mempodipper. c-o mempodipper 3. Before executing the view netcat@netcat:$ uname-r 3.0.0-1 2-generic netcat@netcat:$ cat /etc/issue Ubuntu 11.10 n l netcat@netcat:$ uname-a Linux netcat 3.0.0-1...

libpurple 2.8.10 - OTR Information Disclosure

libpurple 2.8.10 - OTR Information Disclosure source: https://www.securityfocus.com/bid/52175/info libpurple is prone to an information-disclosure vulnerability. Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. The following produc...

libpurple 2.8.10 - OTR Information Disclosure

source: https://www.securityfocus.com/bid/52175/info libpurple is prone to an information-disclosure vulnerability. Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. The following products are vulnerable: libpurple versions prior to...

PacketFence 3.2.0 released

PacketFence 3.2.0 released The PacketFence development team has published version 3.2.0 of its open source network access control NAC system. PacketFence allows organisations to increase control over their network by enforcing authentication and registration for newly connected devices. It also...

PT-2012-3149 · Dolibarr · Dolibarr Cms

Name of the Vulnerable Software and Affected Versions: Dolibarr CMS version 3.2.0 Alpha Description: The issue allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the file parameter to "document.php" or backtopage parameter in a create action to...

CVE-2011-3361

CVE-2011-3361 is an XSS vulnerability in BackupPC 3.2.0 (and possibly earlier) exploitable via the num parameter in the browse action to index.cgi, implemented in CGI/Browse.pm. The issue allows remote attackers to inject arbitrary web script or HTML, with impact described as partial integrity an...

xMatters AlarmPoint APClient 3.2.0 Heap Buffer Overflow

Information -------------------- Name : Heap Buffer Overflow in xMatters AlarmPoint APClient Version: APClient 3.2.0 native Software : xMatters AlarmPoint Vendor Homepage : http://www.xmatters.com Vulnerability Type : Heap Buffer Overflow Md5: 283d98063323f35deb7afbd1db93d859 APClient.bin Severit...

Directory traversal

Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request...

OpenEMR <= 3.2.0 Multiple Input Validation Vulnerabilities

OpenEMR is prone to SQL injection SQLi, HTML injection, and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Hot Links SQL 3.2 - 'report.cgi' SQL Injection

source: https://www.securityfocus.com/bid/45000/info Hot Links SQL is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Uebimiau Webmail 'stage' Parameter Local File Include Vulnerability

Uebimiau Webmail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fedora 13 : libmikmod-3.2.0-11.beta2.fc13 (2010-13702)

Fixes CVE-2009-3995 and CVE-2009-3996. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Wing FTP Server < 3.2.0 PORT Command DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.2.0. Such versions are reportedly affected by a denial of service vulnerability. By sending a specially crafted 'PORT' command with an invalid parameter, it may be possible for an attacker to crash the...

MediaMonkey 3.2.0 - Local Denial of Service

Download : http://download.cnet.com/MediaMonkey-Standard/3000-21414-10109807.html Author: Red-D3v1L sh0otz fly t0 : j0rd4n14n.r1z,H1s0k4,ThE-g0bl!N,T3rr0rist,zAx,dr@g,h311 c0d3 And All sEc-r1z CrEw n00bz : ZombieKSA g0t 0wn3d hehehe n00b pakbugs zf0 ... Version: 3.2.0 my Home : www.sec-r1z.com ,...

Uebimiau Webmail Information Disclosure Vulnerability

Uebimiau Webmail is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MRCGIGUY Hot Links SQL 3.2.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Hot Links SQL / Hot Links SQL-PHP Version 3.2.0 Insecure Cookie Handling Vulnerability...

MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling

MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Hot Links SQL / Hot Links SQL-PHP Version 3.2.0 Insecure Cookie Handling Vulnerability...