Kunena SQL Injection Vulnerability & Information Leakage

Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done on the catids parameter on the advanced search page, ...

Ahmedabad Police register FIR in email hacking case !

The city crime branch hasregistered an FIR based on allegation by Rais Khan, a formeraide of social activist Teesta Setalwad, that his emailaccount was hacked. "An FIR has been registered in connection with thealleged hacking of email account of Khan," DCP crime branchHimanshu Shukla told PTI. Th...

Security fix for the ALT Linux 5 package libxml2 version 1:2.7.8-alt3.M50P.1

Jan. 20, 2011 Andrey Cherepanov 1:2.7.8-alt3.M50P.1 - backport to p5 branch fixes CVE-2010-4494...

Cops hunt for the hacker who tapped Y P Singh's phone in 60 seconds !

News Taken From mumbaimirror.com, The news is as follows... Thane Crime Branch has set up an inquiry into the matter and a team to track down Sachin Loke after reading the Mumbai Mirror exposé A day after Mumbai Mirror exposed how small-time detectives and software professionals offer phone-tappi...

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...

FreeBSD Security Advisory (FreeBSD-SA-10:09.pseudofs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:09.pseudofs.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.4-alt0.M50P.1

Nov. 13, 2010 Andrey Cherepanov 1:2.24.4-alt0.M50P.1 - backport to p5 branch fixed CVE-2009-2473...

Security fix for the ALT Linux 5 package subversion version 1.6.13-alt0.M50P.1

Nov. 12, 2010 Andrey Cherepanov 1.6.13-alt0.M50P.1 - backport to p5 branch fixed CVE-2010-3315...

FreeBSD Security Advisory (FreeBSD-SA-10:08.bzip2.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:08.bzip2.asc ADV FreeBSD-SA-10:08.bzip2.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:08.bzip2.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-So...

cvsnt unauthorized access

Directory traversal via branch name...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

Deepin TFTP Server Directory Traversal Vulnerability

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

Several XSS vulnerabilities were found in the code.

PMASA-2010-5 Announcement-ID: PMASA-2010-5 Date: 2010-08-20 Summary Several XSS vulnerabilities were found in the code. Description It was possible to conduct a XSS attack using crafted URLs or POST parameters on several pages. Severity We consider this vulnerability to be serious. Mitigation...

FreeBSD Security Advisory (FreeBSD-SA-10:07.mbuf.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:07.mbuf.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt0.M50P.1

July 1, 2010 Andrey Cherepanov 2.4.23-alt0.M50P.1 - backport to p5 branch security fixes: CVE-2010-0212 and CVE-2010-0211...

Commercial da news shop system Taobao Pat branch version injection vulnerability-vulnerability warning-the black bar safety net

Commercial da news shop system Taobao Pat branch Edition, first just look at the following code, found to the of each variable are used. SafeRequest This function is to check. Looked under, only to find that turned out to be this role. Function SafeRequestParaName,ParaType Dim ParaValue...

FreeBSD Security Advisory (FreeBSD-SA-10:04.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:04.jail.asc ADV FreeBSD-SA-10:04.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:04.jail.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...