Custom Seraph Authenticators broken in Confluence 5.0

The constructor signature of com.atlassian.confluence.event.events.security.LoginEvent changed between Confluence 4.3.x and 5.0 - an additional String parameter was added to the constructor. From this: code public LoginEventObject src, String username, String sessionId, String remoteHost, String...

Fedora Update for Django FEDORA-2013-2874

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2013-2874 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2013-1423

1 contrib/gforge-3.0-cronjobs.patch, 2 cronjobs/homedirs.php, 3 deb-specific/fileforge.pl, 4 deb-specific/groupdumpupdate.pl, 5 deb-specific/sshdumpupdate.pl, 6 deb-specific/userdumpupdate.pl, 7 plugins/scmbzr/common/BzrPlugin.class.php, 8 plugins/scmcvs/common/CVSPlugin.class.php, 9...

Fedora Update for ekiga FEDORA-2013-2890

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2013-2890 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for openconnect FEDORA-2013-2498

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2013-2498 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Nmap NSE 6.01: http-userdir-enum

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2013:013 ] squid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:013 http://www.mandriva.com/security/ Package : squid Date : February 20, 2013 Affected: 2011., Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected in squid...

Fedora Update for openstack-keystone FEDORA-2013-2168

Check for the Version of openstack-keystone OpenVAS Vulnerability Test Fedora Update for openstack-keystone FEDORA-2013-2168 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for drupal6-context FEDORA-2013-0246

Check for the Version of drupal6-context OpenVAS Vulnerability Test Fedora Update for drupal6-context FEDORA-2013-0246 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Quick.Cms 5.0 / Quick.Cart 6.0 Cross Site Scripting Vulnerability

Quick.Cms version 5.0 and Quick.Cart version 6.0 suffer from a cross site scripting vulnerability. Product: Quick.Cms, Quick.Cart Vendor: OpenSolution team Vulnerable Versions: Quick.Cms 5.0, Quick.Cart 6.0 and probably prior Tested Version: Quick.Cms 5.0, Quick.Cart 6.0 Vendor Notification:...

Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart

Advisory ID: HTB23135 Product: Quick.Cms, Quick.Cart Vendor: OpenSolution team Vulnerable Versions: Quick.Cms 5.0, Quick.Cart 6.0 and probably prior Tested Version: Quick.Cms 5.0, Quick.Cart 6.0 Vendor Notification: December 19, 2012 Vendor Patch: December 20, 2012 Public Disclosure: January 9,...

Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)

This host is missing a critical security update according to Microsoft Bulletin MS13-002. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IShang CMS 5.0 / 7.0 SQL Injection

Exploit Title : IShang CMS Login Page Bypass Vulnerability Exploit Author : Adrian Vendor Homepage : http://www.ishang.net/ Google Dork : Use Your Brain Date: 2013/12/28 Tested On : Win8 Software Link : http://www.ishang.net/ Version : 7.0 / 5.0 1 http://site.com/path/admin/ 2...

WHMCS 5.0 - Insecure Cookie Authentication Bypass

WHMCS 5.0 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability ...

kingcms 5.0 vulnerability-a vulnerability warning-the black bar safety net

To 1. kingcms 5.0 fckeditor the default path in the admin/system/editor/FCKeditor/editor/fckeditor.Html The local horse named for the hx. asp;jpg watch jpg the front there is no point.. OK..actually later do stations combined fckeditor this editor..plus the best verification..only management can...

Design/Logic Flaw

VMware vCenter Server Appliance vCSA 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2012-6325

CVE-2012-6325 affects VMware vCenter Server Appliance (vCSA) 5.0 prior to Update 2, due to an XML parsing vulnerability that allows an authenticated remote user to read arbitrary files. The issue is documented in the VMware advisory VMSA-2012-0018 and is addressed by upgrading to vCSA 5.0 Update ...

Splunk 5.0 Custom App Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Splunk 5.0 Custom App Remote Code...

Empire CMS backstage password reset vulnerability-vulnerability warning-the black bar safety net

5.0 and previous versions: use phpmyadmin to modify the phomeenewsuser table, the password field is set to the value: e10adc3949ba59abbe56e057f20f883e The password is: 1 2 3 4 5 6 Version 5.1: use phpmyadmin to modify the phomeenewsuser table of the record: the password field value is set...

Design/Logic Flaw

Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via 1 a long string or 2 invalid characters in a cookie, which reveals the installation path in an error message...