PHPWebSite 0.7.3/0.8.x/0.9.3 User Module HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11673/info A remote HTTP response splitting vulnerability reportedly affects phpWebSite in its user module. This issue is due to a failure of the application to properly sanitize user-supplied input. A remote attacker may...

ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14063/info ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...

Moreover CGI script 0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1762/info The 'cachedfeed' CGI script supplied by newsfeed vendor Moreover.com contains a file-disclosure vulnerability. The script's 'obtainfile' function, designed to return the contents of a specified file for display ...

SQWebmail 3.x/4.0 HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13374/info SQWebmail is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...

PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15301/info PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this...

Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21686/info Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit these vulnerabilities to influenc...

Microsoft Internet Explorer 5/6 Cached Objects Zone Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Interne...

Microsoft Internet Explorer 5.5 Index.dat Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1978/info IE 5.5 and possibly other versions stores recently visited URLs and cache folder names in a local file called index.dat. This file is kept in the following known locations: Windows 9x: C:/WINDOWS/Temporary...

[SECURITY] [DSA 2934-1] python-django security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2934-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 19, 2014 http://www.debian.org/security/faq -...

DSA-2934-1 python-django - security update

Bulletin has no description...

Kadira: API keys being cached

Your API keys are cached on the client side.This will trigger client side attacks...

Unable to mount disk: unsupported disk type

Challenge When attempting to perform a Guest Files Windows Restore the operation fails with the following error: Unable to mount disk: unsupported disk type Solution It is critical that the Microsoft Windows File Recovery page in the user guide is reviewed to confirm restore compatibility. There...

CVE-2014-2983

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors...

PT-2014-5001

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 6.30 Drupal versions 7.x through 7.26 Description The issue allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors, due to the improper...

CVE-2014-2983: Exposure of Sensitive Information to an Unauthorized Actor

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors...

Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516)

Hi, We have recently discovered a series of vulnerabilities in Firefox for Android that allows a malicious application to successfully derandomize the Firefox profile directory name in a practical amount of time and then leak sensitive data such as cookies and cached information which reside in...

CVE-2013-6734

IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container...

PT-2014-3183

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale Client versions 7.1 through 8.6.0.4 Description The issue allows remote authenticated users to obtain sensitive information in certain circumstances by leveraging access to the same web container, due to the imprope...

CVE-2013-6734: Undefined Security Weakness

IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote authenticated users to obtain sensitive information in opportunistic circumstances by leveraging access to the same web container...

Windows Gather Group Policy Preference Saved Passwords

This module enumerates the victim machine's domain controller and connects to it via SMB. It then looks for Group Policy Preference XML files containing local user accounts and passwords and decrypts them using Microsofts public AES key. Cached Group Policy files may be found on end-user devices ...