[SECURITY] Fedora 18 Update: kdegames-4.10.4-1.fc18

Games for KDE 4, including: bomber bovo granatier kajongg kapman katomic kblackbox kblocks kbounce kbreakout kdiamond kfourinline kgoldrunner kigo killbots kiriki kjumpingcube klickety klines knavalbattle knetwalk kolf kollision konquest kreversi kshisen ksirk ksnakeduel kspaceduel ksquares ksudo...

[SECURITY] Fedora 18 Update: kde-baseapps-4.10.4-1.fc18

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

http_in_body

This plugin searches for HTTP responses that contain other HTTP request/responses in their response body. This situation is mostly seen when programmers enable some kind of debugging for the web application, and print the original request in the response HTML as a comment. Plugin type Grep Option...

Dewafiles 4 Cross Site Request Forgery

Exploit Title: Dewafiles Versi 4 - CSRF Vulnerabilities Author Exploit : vir0e5 Date : 08-06-2012 Site : http://blog.megasoft-id.com/ Vendor : http://blog.megasoft-id.com/article/dewafiles/ Version : Dewafiles versi 4 Software Link: http://blog.megasoft-id.com/article/dewafiles/ Tested on : Windo...

[SECURITY] Fedora 19 Update: kdepimlibs-4.10.4-2.fc19

Personal Information Management PIM libraries for KDE 4...

[SECURITY] Fedora 19 Update: ruby-qt-4.10.4-1.fc19

This package includes ruby bindings for Qt 4...

[SECURITY] Fedora 19 Update: kde-runtime-4.10.4-1.fc19

Core runtime for KDE 4...

[SECURITY] Fedora 19 Update: kdelibs-4.10.4-1.fc19

Libraries for KDE 4...

[SECURITY] Fedora 19 Update: kdegames-4.10.4-1.fc19

Games for KDE 4, including: bomber bovo granatier kajongg kapman katomic kblackbox kblocks kbounce kbreakout kdiamond kfourinline kgoldrunner kigo killbots kiriki kjumpingcube klickety klines knavalbattle knetwalk kolf kollision konquest kreversi kshisen ksirk ksnakeduel kspaceduel ksquares ksudo...

[SECURITY] Fedora 19 Update: kde-baseapps-4.10.4-1.fc19

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

Security Bypass and Remote Execution

Product: MODX Revolution Severity: Extremely Critical Versions: 2.1.0–2.2.7 Vulnerability type: Security Bypass Report date: 2013-Jun-4 Fixed date: 2013-Jun-4 Description Two vulnerabilities were discovered in MODX that allow users to bypass security. Attackers could exploit this to remotely...

Umbraco CMS 4.x Arbitrary aspx File Upload Vulnerability

Umbraco CMS version 4.x is vulnerable to a remote code execution vulnerability. An attacker can upload files via an unsecured web service located at /umbraco/webservices/codeEditorSave.asmx method SaveDLRScript. I created this exploit because in some audits the public exploit that juan vazquez...

Novell Client for Windows 'nicm.sys' 本地权限提升漏洞

BUGTRAQ ID: 60203 Novell Client 工作站软件通过提供对 NetWare 和 Open Enterprise Server OES 的访问，扩展了 Linux 和 Windows 台式机的功能。 Novell Client 2 SP3 for Windows 7/8在处理NICM.SYS内的"NICMIOCTLREQUESTREPLY" 0x143B6B IOCTL请求时存在错误，可导致以内核权限执行任意代码。 0 Novell Client for Windows NT/2000/XP 4.x 厂商补丁： Novell ------...

Peer-to-Peer Botnet Takedowns a Challenge

The FBI, Justice Department and technology companies have had success shutting down botnets that rely on a centralized infrastructure and command and control servers to communicate with bots, steal data or send malicious commands. Peer-to-peer botnets, however, have proven more difficult to take...

A few more days before EMET 4

On May 8th, we announced that EMET 4 would have been released today, May 28th. Since that day, we had additional feedback and we are working on a few things that are requiring a little bit more time than expected. This considered, we are not releasing EMET 4 today, and we will take a few more day...

Fedora 17 : xen-4.1.5-4.fc17 (2013-8571)

xend toolstack doesn't check bounds for VCPU affinity XSA-56, CVE-2013-2072 xen-devel should require libuuid-devel, pygrub menu items can include too much text Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Memory corruption

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before...

CVE-2013-3333

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before...

CVE-2013-3326

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before...

CVE-2013-3330

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before...