CVE-2011-5190: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

PT-2012-2167

Name of the Vulnerable Software and Affected Versions Social Book Facebook Clone 2010 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to several API endpoints, including "/signup.php", "/lostpass.php", "/login.php", "/index.php",...

Pinterest Clone Script - Multiple Vulnerabilities

Exploit Title: Pinterestclones Multiple Vulnerabilities Author: DaOne Price: $199.99 Software Link: http://www.pinterestclones.com/ Google Dork: N/A Persistent XSS How to exploit: 1-go to : http://site.com/createusernamen/ 2-Put anything in the other field Password & E-mail etc... 3-Go to: Add...

Clipbucket 2.5 - Blind SQL Injection

Clipbucket 2.5 - Blind SQL Injection Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia...

CVE-2012-1119

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection...

CVE-2012-1119

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection...

UBUNTU-CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

PT-2012-2968

Name of the Vulnerable Software and Affected Versions Update Manager versions used by Ubuntu 12.04 LTS, 11.10, and 11.04 Description The issue concerns weak permissions used by Update Manager in Ubuntu for certain files, specifically apt-clone system state.tar.gz and system state.tar.gz. This...

PT-2012-3823 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.2 Description: The issue is related to the procfs implementation in the Linux kernel, where it does not properly interact with CLONE NEWPID clone system calls. This allows remote attackers to cause a denial of...

Permanent Reverse TCP Backdoor for IPhone and IPad

Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...

kernel: block: CLONE_IO io_context refcounting issues

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONEIO feature, which allows local users to cause a denial of service I/O instability by starting multiple processes that share an I/O context...

PT-2012-1030 · Debian +4 · Debian +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.33 Description: The issue is related to the I/O implementation for block devices in the Linux kernel, which does not properly handle the CLONE IO feature. This can be exploited by local users to cause a deni...

Ubuntu Update for linux-mvl-dove USN-1415-1

Ubuntu Update for Linux kernel vulnerabilities USN-1415-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14151.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-mvl-dove USN-1415-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu Update for linux-mvl-dove USN-1415-1

Ubuntu Update for Linux kernel vulnerabilities USN-1415-1 SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu 10.10 : linux-mvl-dove vulnerability (USN-1415-1)

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONEIO is specified. An unprivileged local user could exploit this to cause a denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Ubuntu Security Notice...

Ubuntu Update for linux USN-1411-1

Ubuntu Update for Linux kernel vulnerabilities USN-1411-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14111.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1411-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for linux-ec2 USN-1410-1

Ubuntu Update for Linux kernel vulnerabilities USN-1410-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14101.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ec2 USN-1410-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu: Security Advisory (USN-1411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1411-1: Linux kernel vulnerability

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONEIO is specified. An unprivileged local user could exploit this to cause a denial of service...

Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-1410-1)

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONEIO is specified. An unprivileged local user could exploit this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenab...