GLSA-201412-09 : Multiple packages, Multiple vulnerabilities fixed in 2011

The remote host is affected by the vulnerability described in GLSA-201412-09 Multiple packages, Multiple vulnerabilities fixed in 2011 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail...

Multiple packages, Multiple vulnerabilities fixed in 2011

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail LVM...

CVE-2014-5181

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...

Directory traversal

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...

CVE-2014-5181

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...

CVE-2014-5181

The CVE-2014-5181 issue affects the Last.fm Rotation WordPress plugin (version 1.0) via lastfm-proxy.php. A directory traversal flaw allows an attacker to read arbitrary files by supplying a .. in the snode parameter, enabling potential information disclosure. The Nuclei template and related reco...

WordPress Last.FM Rotation Plugin <= 3.3 - Local File Inclusion

Because of this vulnerability in lastfm-proxy.php, the attackers can read arbitrary files in the "snode" parameter. Solution Update the plugin...

[SECURITY] Fedora 20 Update: qmmp-0.7.7-1.fc20.1

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support Ogg Vorbis support native FLAC support Musepack support WavePack support ModPlug support PCM WAVE support CD Audio...

Last.fm iOS Mobile Application

Binary data 6539.prm...

Last.fm Android Mobile Application

Binary data 6538.prm...

With LinkedIn: The Bell Tolls For Simple Password Hashing

This week’s revelations about leaks of user passwords from the professional networking site LinkedIn, dating Web site eHarmony.com and music site Last.fm suggest that even tech-savvy firms are slow to accept that hashes -a once-reliable technology for storing data online – now offer scant...

Last.fm, Mum On Breach, Adopts 'More Rigorous' Password Security

Last.fm, the online music streaming service, said it has implemented ‘more rigorous’ security for customer account passwords in the wake of reports that some of those passwords had been leaked online. In a post on the company’s Website, Last.fm said that its investigation of reports that hashed o...

Last.fm Confirms They Were Hacked, Change Your Passwords Now

Last.fm Confirms They Were Hacked, Change Your Passwords Now After this week's LinkedIn fiasco, it appears the latest tech giant to fall to bored hackers is Last.fm. Music-streaming website Last.fm is the latest organisation to urge its users to change their passwords immediately. The London-base...

eHarmony, Last.fm Emerge as Latest Victims in Wake of LinkedIn Hack

The online dating site eHarmony announced Wednesday that passwords for some of its members have been leaked, making it the second major social network site to announce the theft of user passwords in the last 24 hours. According to an entry posted on the eHarmony Blog, the company reset the affect...

Unfixed XSS vulnerability at www.lastfm.com.tr

Security researcher r@nger, has submitted on 04/05/2008 a cross-site-scripting XSS vulnerability affecting www.lastfm.com.tr, which at the time of submission ranked 10275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is current...