[MajorSecurity SA-074]CMS RedAks 2.0 - Multiple Cross-site Scripting issues

MajorSecurity SA-074CMS RedAks 2.0 - Multiple Cross-site Scripting issues Details ============= Product: CMS RedAks 2.0 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.redaks.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of MajorSecurit...

SOL11719 - Mitigating risk from SSH brute force login attacks

Vulnerability Description F5 products and versions that are affected by this Security Advisory F5 Product Development has determined that all products and versions are affected by the issue described in this security advisory. Note: For information about signing up to receive security notice...

Active Directory Install at DHS Questioned

An audit of the Department of Homeland Security’s Microsoft Windows Active Directory at its headquarters revealed that its implementation failed to fully comply with the department’s security guidelines, and no mechanism was in place to ensure its level of security, DHS’s inspector general said i...

Ten Percent of IT Pros Falsify Security Audits

According to a survey of 242 IT professionals, 1 in 10 admitted that either they or a colleague have cheated to get an IT audit passed. However, it isn’t all bad news; compared to a similar survey conducted in 2009 the number of people admitting to cheating has halved in number. Read the full...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Open-Audit Multiple Vulnerabilities

Open-Audit is prone to multiple vulnerabilities, including a local file- include vulnerability and multiple SQL-injection, cross-site scripting, and authentication-bypass vulnerabilities. An attacker can exploit these vulnerabilities to steal cookie-based authentication credentials, compromise th...

Open-Audit 20081013/20091223-RC Multiple Vulnerabilities

Open-Audit is prone to multiple vulnerabilities, including a local fileinclude LFI vulnerability and multiple SQL injection SQLi, cross-site scripting XSS, and authentication bypass vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a...

Open-AudIT include_lang.php language Parameter Traversal Local File Inclusion

The web server hosts Open-AudIT, an open source network auditing application written in PHP. At least one install of Open-AudIT on the remote host fails to sanitize user-supplied input to the 'language' parameter before using it in 'includelang.php' to include PHP code. Regardless of PHP's...

Open-AudIT - Multiple Vulnerabilities

Open-AudIT - Multiple Vulnerabilities GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is...

Open-AudIT Multiple vulnerabilities

Exploit for php platform in category web applications =================================== Open-AudIT Multiple vulnerabilities =================================== GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt...

Open-AudIT - Multiple Vulnerabilities

GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes. Open-AudIT...

Open-AudIT SQL Injection / Cross Site Scripting / Local File Inclusion

GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes. Open-AudIT...

[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite

CAL-20100204-3Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1280 CAL ID: CAL-20100204-3 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a...

[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability

CAL-20100204-1Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1282 CAL ID: CAL-20100204-1 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com ha...

Fedora Update for sudo FEDORA-2010-6701

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-6701 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sudo FEDORA-2010-6749

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-6749 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Audit Shows Flaws in Coast Guard System

Flaws in the configuration and security of the U.S. Coast Guard IT system caused a material weakness in the Department of Homeland Security financial system, according to a recent audit. Read the full article. Dark Reading...

Oracle Database Multiple Vulnerabilities (April 2010 CPU)

The remote Oracle database server is missing the April 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Core RDBMS - JavaVM - Change Data Capture - Audit %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] Fedora 13 Update: sudo-1.7.2p6-1.fc13

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...