4338 matches found
Firefox < 10.0.11 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 10.0.11 and thus, is potentially affected by the following security issues : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-5843 - An error exists ...
Mozilla Thunderbird 10.x < 10.0.11 Multiple Vulnerabilities
The installed version of Thunderbird 10.x is potentially affected by the following security issues : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-5843 - An error exists in the method...
Thunderbird 10.x < 10.0.11 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird 10.x is potentially affected by the following security issues : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-5843 - An error exists in the method...
Firefox 10.x < 10.0.11 Multiple Vulnerabilities
The installed version of Firefox 10.x is potentially affected by the following security issues : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-5843 - An error exists in the method...
Fedora 17 : python-django-horizon-2012.1.3-1.fc17 (2012-16148)
Latest bugfix update for the essex branch CVE-2012-3540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
FreeBSD-SA-12:05.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:05.bind Security Advisory The FreeBSD Project Topic: named8 DNSSEC validation Denial of Service Category: contrib Module: bind Announced: 2012-08-06 Credits:...
Security Advisory-HTTP Session Management Vulnerability in HTTP Module
Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:04.sysret Security Advisory The FreeBSD Project Topic: Privilege escalation when returning from kernel Category: core Module: sysamd64 Announced: 2012-06-12...
Anonymous Hackers shut down website of Colombia Justice Ministry
Anonymous Hackers shut down website of Colombia Justice Ministry Anonymous hackers shut down the websites of Colombia's Justice Ministry website on Friday evening. The website was back online Saturday morning. Also, The website of Cambio Radical, the political party of Interior Minister German...
Russian Botnet Hacker arrested for hacking into six million computers
Russian Botnet Hacker arrested for hacking into six million computers Police have detained a 22-year-old hacker who created a system of networked computers that was used to steal more than 150 million rubles $4.47 million from people's bank accounts and already one of the most wanted hacker in th...
Netto.se Open Redirection
Background -------------- Netto is a supermarket chain based in denmark with stores in Denmark, Poland, Germany and Sweden. The following vulnerability affects the swedish branch site although similar ones may affect others. Vulnerability -------------- The vulnerability is present on the netto.s...
PHP 5.2.x filter_globals Subsequence Request Parsing Remote Code Execution
According to its banner, the version of PHP installed on the remote host is in the 5.2 release branch. As such, it reportedly may be affected by a remote code execution vulnerability. An error in the file 'ext/filter/filter.c' does not properly clear the 'filterglobals' struct if PHP encounters...
Cyberoam Unified Threat Management: Insecure Password Handling
Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia...
Cyberoam UTM - Multiple Vulnerabilities
SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and productivity to...
Pakistani Hackers attacks 31 government and 46 educational institutions Websites
Pakistani Hackers attacks 31 government and 46 educational institutions Websites Maharashtra police said, websites of more than 46 educational institutions and 31 government websites based in the district were allegedly hacked by a group reportedly based in Pakistan. KhantastiC, a hacker who...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the orderedmalloc function in boost/pool/pool.hpp. An attacker can perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated...
Asterisk - ast_parse_digest() Stack Buffer Overflow (PoC)
Asterisk - astparsedigest Stack Buffer Overflow PoC =========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plen...
FreeBSD Security Advisory (FreeBSD-SA-11:07.chroot.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:07.chroot.asc SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Cyberoam Central Console 2.00.2 - Remote File Inclusion
Cyberoam Central Console 2.00.2 - Remote File Inclusion Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central...
