[SECURITY] [DSA 2263-2] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2263-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 30, 2011 http://www.debian.org/security/faq -...

DSA-2263-2 movabletype-opensource - several

Bulletin has no description...

KLA10184 Vulnerability in Fenrir Grani

Script interaction prevention was missing in Fenrir Grani. By exploiting this vulnerability malicious users can modify clipboard content. This vulnerability can be exploited remotely via a specially designed web site. Original advisories Original bulletin Related products Sleipnir Grani CVE list...

Opera < 10.53 Asynchronous Content Modification Uninitialized Memory Access

Binary data 5527.prm...

Opera < 10.53 Asynchronous Content Modification Uninitialized Memory Access

Binary data 800846.prm...

Avant Browser Address Bar Spoofing Vulnerability

This host is installed with Avant Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbavantbrowseraddrbarspoofingvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Avant Browser Address Bar Spoofing Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery

Overview bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. bingo!CMS core and bingo!CMS are content management systems CMS. bingo!CMS core and bingo!CMS contain a cross-site request forgery vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC...

DMXReady Job Listing <= 1.1 Remote Contents Change Vulnerability

Exploit for unknown platform in category web applications ================================================================ DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp :...

Opera Web Browser Multiple Security Vulnerabilities Aug-08 (Linux)

The remote host is running Opera Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnaug08lin900039.nasl 7524 2017-10-20 08:31:54Z cfischer $ Description: Opera Web Browser Multiple Security Vulnerabilities Aug-08 Linux Authors: Chandan S...

CVE-2008-3203

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

Authentication flaw

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

Debian Security Advisory DSA 1344-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1344-1. OpenVAS Vulnerability Test $Id: deb13441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1344-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1346-1 : iceape - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the SeaMonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3844 'mozbugra4' discovered that a regression in the handling...

[SECURITY] [DSA 1346-1] New iceape packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1346-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 4th, 2007 http://www.debian.org/security/faq -...

Dynamic network Forum brush division brush experience vulnerability-vulnerability warning-the black bar safety net

Action Network of adminpostings. the asp settings are not strict..in Postings when lifting. You can define your own digital..reach brush sub..brush experience and the charm of the object. For instance I have a patch, http://127.0.0.1/dispbbs.asp?boardID=30&ID=2 6 9 5 4&page=1 Then the patch to...

CVE-2005-0391

geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...

ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer

Below please find our public report for the HTTPS cache poisoning issue in Internet Explorer. It includes workarounds for server operators, allowing them to protect their web services without having to rely on users to patch their browsers. Regards, ACROS Security http://www.acrossecurity.com...

TCLHttpd 3.4.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/8688/info It has been reported that several of the modules included with TCLHTtpd are vulnerable to cross-site scripting attacks. According to the report, the Status, Debug, Mail and Admin modules are affected by these vulnerabilities. Four instances of...

PT News Unauthorized Administrative Access

The remote host is using the PT News management system. There is a flaw in this version which allows anyone to execute arbitrary admnistrative PTnews command on this host such as deleting news or editing a news without having to know the administrator password. An attacker may use this flaw to ed...

Vulnerability in encrypted loop device for linux

Hello, The following text describes a security hole in the encrypted loop device for linux. Because of it, an attacker is able to modify the content of the encrypted device without being detected. This text proposes to fix the hole by authenticating the device. comments are welcome ps: version in...