[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Vimeo: ftp upload of video allows naming that is not sanitized as the manual naming

I have uploaded via ftp Vimeo Pro account a filename """.mp4 And as you can see in the screenshot it is put automatically as the name of the video. But I cannot put this name """.mp4 manually So I think it needs the same sanitization of the name as it's done after the manual editing. Even if the...

[SECURITY] Fedora 21 Update: mingw-curl-7.39.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

[SECURITY] Fedora 19 Update: mingw-curl-7.37.0-1.fc19

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Fake Lookout android app stealing your SMS and MMS messages

Android's App store is currently facing a new dilemma as its security has been compromised once again. Researchers from security firm TrustGo have recently spotted on Google Play a bogus app that supposedly automatizes the updating of a batch of other apps. The malicious code was hidden within an...

Information disclosure

ftpuploadfile.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message...

White House E-Card Scam Part of Larger Zeus-Related Attack !

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...

White House E-Card Scam Part of Larger Zeus-Related Attack

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...

JAF CMS 4.0 Upload Exploit

Exploit for php platform in category web applications ========================== JAF CMS 4.0 Upload Exploit ========================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Fedora Update for curl FEDORA-2010-2762

Check for the Version of curl OpenVAS Vulnerability Test Fedora Update for curl FEDORA-2010-2762 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 12 Update: curl-7.19.7-7.fc12

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

CVE-2009-3631

CVE-2009-3631 affects TYPO3 Backend: the Backend subcomponent allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename when the DAM extension or ftp upload is enabled. Affected versions span TYPO3 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before ...

SASPCMS 0.9 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Conte...

Joomla Component paxxgallery 0.2 (iid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncompaxxgallery AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 http://www.hackturkiye.com MA陌L : [email protected] DORK 1 : allinurl: compaxxgallery "iid" DORK 2 : allinurl: compaxxgallery "userid" EXPLOIT : AFTER...

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE...

Joomla! Component paxxgallery 0.2 - 'iid' SQL Injection

joomla SQL Injectioncompaxxgallery AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 http://www.hackturkiye.com MAÄ°L : [email protected] DORK 1 : allinurl: compaxxgallery "iid" DORK 2 : allinurl: compaxxgallery "userid" EXPLOIT : AFTER userid ADD EXPLÄ°OTUSERÄ°D DEN SONRA...

Joomla! Component paxxgallery 0.2 - iid SQL Injection

Joomla! Component paxxgallery 0.2 - iid SQL Injection joomla SQL Injectioncompaxxgallery AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 http://www.hackturkiye.com MAÄ°L : [email protected] DORK 1 : allinurl: compaxxgallery "iid" DORK 2 : allinurl: compaxxgallery "userid"...

Excel Viewer OCX 3.1.0.6 Multiple Methods Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url sell: from 63.95...

Ordinary file deception-vulnerability warning-the black bar safety net

Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS bundle file, bundle...

Teach you to retrieve Windows NT Admin rights on the method-vulnerability warning-the black bar safety net

One, by modifying the registry Those who have logged on NT the machine of the user, for example, IUSRmachine, have to HKEYLOCALMACHINE\SOFTWARE\MICROSOFT\WINDOWS\CurrentVersion\Run item Read and write permissions, the user can remotely access This item. For example, he can create a bat file, the...