GLSA-201012-01 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201012-01 Chromium: Multiple vulnerabilities Multiple vulnerabilities were found in Chromium. For further information please consult the release notes referenced below. Impact : A remote attacker could trick a user to perform a se...

Bonsai Information Security - VMware Tools update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools Update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools - Update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools - Update OS Command Injection

VMware Tools - Update OS Command Injection VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Informati...

Pandora Fms 3.1 - Directory Traversal Local File Inclusion

Pandora Fms 3.1 - Directory Traversal Local File Inclusion + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating...

CORE-2010-1018 - Landesk OS command injection

Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Landesk OS command injection 1. Advisory Information Title: Landesk OS command injection Advisory Id: CORE-2010-1018 Advisory URL: http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability Date...

Landesk - OS command Injection

Advisory Information Title: Landesk OS command injection Advisory Id: CORE-2010-1018 Advisory URL: http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability Date published: 2010-11-10 Date of last update: 2010-11-10 Vendors contacted: LANDesk Release mode: Coordinated...

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file mma...

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...

[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability

Vendor: Microsoft Product: Windows Mobile Vulnerability: Double Free Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil nver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com Vulnerability Details and Analysis: The...

Windows Mobile 6.1 / 6.5 Denial Of Service

Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...

Wiccle Web Builder CMS / iWiccle CMS Community Builder Cross Site Scripting

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...

Microsoft Windows Mobile 6.16.5 - Double-Free Denial of Service

Microsoft Windows Mobile 6.16.5 - Double-Free Denial of Service Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from...

Oracle Virtual Server Agent Command Injection

Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracle Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely...

Bonsai Information Security - Oracle Virtual Server Agent Command Injection

Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracle Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely...

Oracle Virtual Server Agent - Command Injection

Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracle Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely...

Oracle Virtual Server Agent - Command Injection

Oracle Virtual Server Agent - Command Injection Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracle Release mode: Coordinated release 2. Vulnerability...