Wordpress Front End Upload 0.5.3 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Front End Upload Shell Upload Vulnerability Version : 0.5.3 Link : http://wordpress.org/extend/plugins/front-end-upload/ Plugins : http://downloads.wordpress.org/plugin/front-end-upload.0.5.3.zip Google Dork :...

WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload

Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-end-upload/ Date: 31/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://mondaybynoon.com/20120102/announcing-front-end-upload-wordpress-plugin/ Software Link:...

RedHat Update for sssd RHSA-2011:0560-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Segue vulnerable to cross-site scripting

Overview Segue contains a cross-site scripting vulnerability. Segue is a content management system. Segue contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

FreeNAC v3. 0 2 SQL injection and XSS flaws and fixes-vulnerability warning-the black bar safety net

FreeNAC version 3.02 SQL Injection and XSS Vulnerabilties Author: Blake Software address: http://sourceforge.net/project/showfiles.php?groupid=170004 Affected version: 3.02 Test system: Ubuntu 8.04 freenac version 3.02 vmware appliance FreeNAC FreeNAC provides Virtual LAN assignment, LAN access...

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x LCE

Exploit for windows platform in category dos / poc Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista...

Symantec End Point Protection 11.x Symantec Network Access Control 11.x - Local Code Execution (PoC)

Symantec End Point Protection 11.x Symantec Network Access Control 11.x - Local Code Execution PoC Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP...

Symantec End Point Protection / Network Access Control 11.x Code Execution

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7 32Bit CVE : CVE-2012-0289 Time Lin...

[SECURITY] Fedora 16 Update: bind-dyndb-ldap-1.1.0-0.11.rc1.fc16

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

ISPA to launch cyber security code of practice in SA

ISPA to launch cyber security code of practice in SA South Africa's Internet Service Providers' Association ISPA has teamed with Australia's Internet Industry Association to develop a new voluntary industry code of practice to improve cybersecurity for end users. Known as the 'icode', and develop...

Security Issues Critical to the End-user

Dennis Fisher, editor-in-chief, and his guests, Josh Shaul and Jack Daniel, candidly discuss end-user security, where breaches occur and how organizations can fix these problems without causing havoc to their enterprise networks...

Siemens SIMATIC S7-400 PN CPU DoS

Overview Siemens has reported to ICS-CERT that denial-of-service DoS vulnerabilities exist in the SIMATIC S7-400 V6 and SIMATIC S7-400 V5 PN CPU products. Siemens has produced a firmware update that mitigates the vulnerability affecting the S7-400 V6. Siemens will not fix the vulnerability that...

[SECURITY] Fedora 17 Update: python-django-horizon-2012.1-2.fc17

Horizon is a Django application for providing Openstack UI components. It allows performing site administrator viewing account resource usage, configuring users, accounts, quotas, flavors, etc. and end user operations start/stop/delete instances, create/restore snapshots, view instance VNC consol...

ICMP Exfiltration Service

This module is designed to provide a server-side component to receive and store files exfiltrated over ICMP echo request packets. To use this module you will need to send an initial ICMP echo request containing the specific start trigger defaults to '^BOF' this can be followed by the filename bei...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit...

LG-Nortel ELO GS24M Switch contains multiple vulnerabilities

Overview The LG-Nortel ELO GS24M switch web management interface contains multiple vulnerabilities including; authentication bypass CWE-592 and information exposure CWE-200. Description The LG-Nortel ELO GS24M switch web management interface authentication can be bypassed by accessing URL's for...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20120314-asa Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

ZyXel GS1510 Cross Site Scripting

Advisory Information Title: Multiple vulnerabilities in ZyXel GS1510 web front end Date published: 2012-03-14 12:57:15 AM upSploit Ref: UPS-2011-0042 Advisory Summary IT Security Geeks have discovered multiple vulnerabilities in the ZyXel 1510 24-port Ethernet switch, these include Admin password...

Information disclosure vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

It has been discovered that the extension "Front End User Registration" srfeuserregister is vulnerable to information disclosure Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.1 and below Vulnerability Type:...

CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability [Updated]

OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...