Jara 1.6 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in Jara Software : Jara 1.6 and possibly below. Vendor Homepage : http://sourceforge.net/projects/jara/ Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Canberk Bolat Advisory...

CVE-2012-2864

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."...

Phishing for Fanboys with Phony iPhone 5 Images

There is no such thing as a trivial detail when it comes to the impending release of an Apple product and scammers are well aware of this. A recent attack is exploiting the public’s fascination with all things Apple and the ubiquitous interest in anything iPhone 5-related with an email phishing...

CentOS 5 : gimp (CESA-2012:1181)

Updated gimp packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS Update for gimp CESA-2012:1181 centos5

Check for the Version of gimp OpenVAS Vulnerability Test CentOS Update for gimp CESA-2012:1181 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Blackberry Cross Site Scripting

Exploit Title: blackberry xss Date: 15.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://es.blackberry.com/newsroom/success/casestudy.jsp?title=TheOfficeoftheSpanishPrimeMinister&case= "...

Mandriva Update for busybox MDVSA-2012:129-1 (busybox)

Check for the Version of busybox OpenVAS Vulnerability Test Mandriva Update for busybox MDVSA-2012:129-1 busybox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

BackTrack 5 R3 Released - Download Now !

The latest version of Backtrack is out! Check out Backtrack 5 R3! "The time has come to refresh our security tool arsenal – BackTrack 5 R3 has been released. R3 focuses on bug-fixes as well as the addition of over 60 new tools – several of which were released in BlackHat and Defcon 2012. A whole...

Call Of Duty Cross Site Scripting

Exploit Title: callofduty xss Date: 13.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php https://profile.callofduty.com/p/login.act?redirectUrl=XSS "; alert"TayfunBasoglu";" https://profile.callofduty.com/p/login.act?redirectUrl= "; alert"TayfunBasoglu";"...

Playboy Cross Site Scripting

Exploit Title: playboy.com Xss Date: 13.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://www.playboy.com/ " http://www.playboy.com/search?term=%22%3E%3Cimg%20src=x%20onerror=prompt%281%29;%3E...

Manchester United Cross Site Scripting

Exploit Title: manchester united xss Date: 10.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ---------------- http://www.manutd.com/Search-Results.aspx?qs=manutdfrontend&catTxt=&searchText=XSS http://www.manutd.com/Search-Results.aspx?qs=manutdfrontend&catTxt=&searchText="...

MIRC.net Cross Site Scripting

Exploit Title: mirc xss Date: 10.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ---------------- http://mirc.net/projects.php?go=maddons&offset=&order=id&sort=desc&mver=0&keywords=xss " http://mirc.net/projects.php?go=maddons&offset=&order=id&sort=desc&mver=0&keywords="...

Debian Security Advisory DSA 2521-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2521-1. OpenVAS Vulnerability Test $Id: deb25211.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2521-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CentOS Update for sudo CESA-2012:1149 centos5

Check for the Version of sudo OpenVAS Vulnerability Test CentOS Update for sudo CESA-2012:1149 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-3440

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux RHEL 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file...

CVE-2012-3440

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux RHEL 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file...

RHEL 5 : sudo (RHSA-2012:1149)

An updated sudo package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

CentOS 5 : sudo (CESA-2012:1149)

An updated sudo package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

CVE-2012-1014

The processasreq function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service uninitialized pointer dereference and daemon crash or possibly execute arbitrary...

CVE-2012-1015

The kdchandleprotectednegotiation function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute...