CISPA Passes House to a Cacophony of Groans and Cheers

The controversial Cyber Intelligence Sharing and Protection Act CISPA passed with bipartisan support by a 248-168 vote in the U.S. House of Representatives last night, despite warnings from privacy experts and a growing public outcry. CISPA’s chief supporter and co-sponsor, Mike Rogers R-MI,...

Obama Administration Opposes CISPA As Congress Amends Proposed Law

The Obama Administration joined the Cyber Intelligence Sharing and Protection Act CISPA debate yesterday when a senior State Department advisor told The Guardian that the White House opposed the controversial bill. CISPA emerged in the wake of the equally controversial Stop Online Piracy Act SOPA...

CVE-2012-1113

Multiple cross-site scripting XSS vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1113

Multiple cross-site scripting XSS vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1113

Multiple cross-site scripting XSS vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1113

CVE-2012-1113 affects Gallery2 up to 2.3.2 and Gallery3 up to 3.0.3, with multiple XSS vulnerabilities in the administration subsystem. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references in Fedora/OpenVAS/Nessus advisories confirm the vuln...

IBM Tivoli Directory Server Web Administration Tool Unspecified XSS

According to its version, the IBM Tivoli Directory Server Web Administration Tool installed on the remote host is potentially affected by an unspecified cross-site scripting vulnerability. A remote attacker, exploiting this flaw, could potentially execute arbitrary script code in the user's brows...

IBM Tivoli Directory Server Web Administration Tool Detection

IBM Tivoli Directory Server Web Administration Tool, a web interface for managing IBM Tivoli Directory Server, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58815; scriptversion"1.6";...

seditio165_CSRF_and_world_readble_db_dumpissuses

============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...

Arbor Networks Peakflow SP crossite scripting

Crossite scripting in administration interface...

Fedora Update for phpMyAdmin FEDORA-2011-15460

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-15460 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2012-0711

Integer signedness error in the db2dasrrm process in the DB2 Administration Server DAS in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...

CVE-2012-0711

Integer signedness error in the db2dasrrm process in the DB2 Administration Server DAS in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...

Integer overflow

Integer signedness error in the db2dasrrm process in the DB2 Administration Server DAS in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...

DarkComet-RAT v5.1 Released - Remote Administration Tool

DarkComet-RAT v5.1 Released - Remote Administration Tool This new version of the famous darkcomet RAT , a remote management tool created by DarkCoderSc . DarkComet is also considered as the most stable RAT around and it is even regarded more stable than some professional ones. Change Log: - GUI...

IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities

Binary data 6347.prm...

DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities : - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. IC79518 - An unspecified error can allow...

PayPal Revises Privacy Policy, User Agreement Policy

PayPal announced that it is changing both its privacy and user agreement policies, adding tweaks to its customer identification program and the way it collects and stores its customers’ personal information. The changes will take effect on April 1. Under the new policy, Paypal may collect...

Directory traversal

Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...