Exploits for Two-Year-Old PHP Security Vulnerability Found

Close to two years ago, a serious vulnerability in PHP was accidentally disclosed after it was discovered months prior during a hacking contest. A patch was released in relatively short order, and one would assume that given PHP’s prevalence as a web development framework, the fix would have been...

Design/Logic Flaw

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/initrunit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object...

Scientific Linux Security Update : haproxy on SL6.x i386/x86_64 (20130730)

A flaw was found in the way HAProxy handled requests when the proxy's configuration '/etc/haproxy/haproxy.cfg' had certain rules that use the hdrip criterion. A remote attacker could use this flaw to crash HAProxy instances that use the affected configuration. CVE-2013-2175 %NASLMINLEVEL 70300 C...

Confusing Attackers with Artillery By Dave Kennedy (ReL1K)

Confusing Attackers with Artillery By Dave Kennedy ReL1K .png Dave Kennedy ReL1K, A security ninja & penetration tester develop Another amazing tool for Linux Protection, Named "Artillery". This Article is written by Dave for our January Issue of The Hacker News Magazine, We like to share with ou...

DEBIAN-CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

[SECURITY] [DSA 2202-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2202-1 [email protected] http://www.debian.org/security/ Stefan Fritsch March 23, 2011 http://www.debian.org/security/faq -...

Design/Logic Flaw

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spooldirectory directive...

Design/Logic Flaw

query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query...

C9 static article publishing system vulnerabilities-vulnerability warning-the black bar safety net

Author:jshell The recent ongoing in-depth study of the asp to down. chinaz. com to see the source code into the habit Been seeing a guy called C9 static article publishing system The program is just not carefully watched Today download back a see under found problems in the vote there is a flash...

RedHat Security Advisory RHSA-2009:0337

The remote host is missing updates announced in advisory RHSA-2009:0337. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...

php security update

CentOS Errata and Security Advisory CESA-2009:0337 Updated php packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

IIS Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...

Microsoft Internet Information Services (IIS) Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. SPDX-FileCopyrightText: 2001 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

GLSA-200407-05 : XFree86, X.org: XDM ignores requestPort setting

The remote host is affected by the vulnerability described in GLSA-200407-05 XFree86, X.org: XDM ignores requestPort setting XDM will open TCP sockets for its chooser, even if the DisplayManager.requestPort setting is set to 0. Remote clients can use this port to connect to XDM and request a logi...

Microsoft IIS global.asa Remote Information Disclosure

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

Security issue with GroupWise 6 and LDAP authentication in PostOffice

Issue: Any user can login into any GroupWise account. Environment: GroupWise 6 Post Office using LDAP authentication AND security configuration of PostOffice leaves LDAP User Name and Password fields blank in the Post Office Agent object in ConsoleOne. Exploit: Run GroupWise as any user either...