9121 matches found
HP Power Manager Cross Site Request Forgery (CSRF) and XSS Vulnerability
This host is running HP Power Manager and is prone to cross site request forgery and cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhppowermanagercsrfvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ HP Power Manager Cross Site Request Forgery CSRF and XSS Vulnerability Authors:...
CentOS Update for libuser CESA-2011:0170 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Maruti CEO's email hacked, two Nigerians detained for hacking !
The Gurgaon badge accept bedfast two Nigerians for hacking into the email of auto above Maruti Suzuki's managing administrator and arch controlling administrator CEO Shinzo Nakanishi and sending affected job offers to aspirants. According to sources, the badge accept asked the suspects to accoute...
CVE-2011-0277
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
CVE-2011-0277
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
CVE-2011-0277
HP Power Manager (HPPM)
FreeBSD : mediawiki -- multiple vulnerabilities (8d04cfbd-344d-11e0-8669-0025222482c5)
Medawiki reports : An arbitrary script inclusion vulnerability was discovered. The vulnerability only allows execution of files with names ending in '.php' which are already present in the local filesystem. Only servers running Microsoft Windows and possibly Novell Netware are affected. Despite...
CVE-2011-0910
The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...
Code injection
The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...
CVE-2011-0910
The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...
CentOS 4 / 5 : libuser (CESA-2011:0170)
Updated libuser packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Research Reveals Huge Cache of FTP, Email Credentials Stolen by Waledac
Researchers have discovered that the gang behind the once-and-future botnet Waledac has gathered nearly 500,000 stolen passwords for email accounts, along with close to 125,000 sets of pilfered credentials for FTP accounts. The discovery isn’t so surprising in its details, but rather in its scope...
Facebook Awarded More Than $ 360 Million In Damages Against Spammer
Facebook's security team have reason to celebrate as they have claimed another scalp in the ongoing fight against spammers on the social network. A post on Facebook's Security page announced that this week a federal court has awarded the firm a whopping $360,500,000 in statutory damages and issue...
Two Arrested For Hacking Accounts, Card Cloning !
South District Police has arrested a gang of miscreants and arrested two people accused of hacking accounts for international clients' and to make a clone of your bank or credit cards of different banks. The third defendant is untraceable. A gang of three youths, who are experts at hacking into...
A Day After CEO Is Hacked, Launches New Facebook Security Features !
Coincidence? Unfortunately, probably yes. One day, when your fan site of Mark Zuckerberg has allegedly violated, Facebook has introduced two new security measures. If these guys react or what? They also got "must be used for online banking transactions, such as safety tips. Immediate effect, user...
Directory traversal
The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...
CVE-2010-3435
The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...
DEBIAN-CVE-2011-0002
libuser before 0.57 uses a cleartext password value of 1 !! or 2 x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values...