Greenstone XSS / Password Disclosure / Log Forging

Greenstone Digital Library Software suffers from cross site scripting, password file disclosure, broken salt, and log forging vulnerabilities. ======================================================================== Vulnerable Software: Greenstone Digital Library Software. Official Site:...

Greenstone XSS / Password Disclosure / Log Forging

======================================================================== Vulnerable Software: Greenstone Digital Library Software. Official Site: http://www.greenstone.org/ Dork: inurl:gsdl/etc/ ========================================================================== About software: The aim of...

AWCM 2.2 Access Bypass

Vulnerability Report AWCM 2.2 CVE-Candidate-ID: CVE-2012-2437, CVE-2012-2438 Issue: Access Control Bug in AWCM 2.2, Anyone can build the cookie and inserts DB records. Author: Sooel Son sonpostman at gmail dot com Source Code: http://sourceforge.net/projects/awcm/ 1. Details: CVE-2012-2437 Withou...

Experts Say Attack on Crypto Tokens is Serious, But Not Catastrophic

A group of international academic researchers has made a major advance in the efficiency of a known cryptographic attack on some kinds of crypto hardware, enabling them to extract sensitive keys from tokens such as RSA SecurID and Aladdin eToken devices within 20 minutes. However, experts say tha...

Call spoofing - Evolution of Cybercrime in Growing Children

Call spoofing - Evolution of Cybercrime in Growing Children The Hacker News & 5 Other Top IT Security Sites are Sponsoring a Special Edition January 2012 Magazine under a Cyber Security Awareness Campaign called "ENTER AT YOUR OWN RISK". Our goal is to provide the most up-to-date information on a...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7404)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql. CVE-2010-4015:CVSS v2 Base Score: 4.9 Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DSA-2330-1 simplesamlphp - several

Bulletin has no description...

openSUSE Security Update : postgresql (openSUSE-SU-2011:0254-1)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql CVE-2010-4015:CVSS v2 Base Score: 4.9. Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

PacketManipulator 0.3 released - including Windows Installer !

PacketManipulator 0.3 released - including Windows Installer ! PacketManipulator is a network scanning frontend. PacketManipulator is developed in the Python programming language, and its interface is built with the GTK Toolkit. The project goal is to develop a frontend that is really useful for...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7341)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql CVE-2010-4015:CVSS v2 Base Score: 4.9. Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.1 Security Update : PostgreSQL (SAT Patch Number 3977)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running PostgreSQL CVE-2010-4015: CVSS v2 Base Score: 4.9. Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2010-4020

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

DSA-2129-1 krb5 - checksum verification weakness

Bulletin has no description...

Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Web commands injection through FTP Login in Synology Disk Station CVE-2010-2453 INTRODUCTION Synology Inc develops high-performance, reliable, versatile, and environmentally-friendly Network...

Synology Disk Station Code Execution / Cross Site Request Forgery / Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Web commands injection through FTP Login in Synology Disk Station CVE-2010-2453 INTRODUCTION Synology Inc develops high-performance, reliable, versatile, and environmentally-friendly Network...

Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:267. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200609-15 (gnutls)

The remote host is missing updates announced in advisory GLSA 200609-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Security Advisory (FreeBSD-SA-04:08.heimdal.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:08.heimdal.asc ADV FreeBSD-SA-04:08.heimdal.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD : ikiwiki -- cross site request forging (8d2c0ce1-08b6-11dd-94b4-0016d325a0ed)

The ikiwiki development team reports : Cross Site Request Forging could be used to construct a link that would change a logged-in user's password or other preferences if they clicked on the link. It could also be used to construct a link that would cause a wiki page to be modified by a logged-in...

ikiwiki -- cross site request forging

The ikiwiki development team reports: Cross Site Request Forging could be used to construct a link that would change a logged-in user's password or other preferences if they clicked on the link. It could also be used to construct a link that would cause a wiki page to be modified by a logged-in...