UBUNTU-CVE-2014-1626

XML External Entity XXE vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file...

CVE-2014-1626

XML External Entity XXE vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file...

CVE-2014-1626

XML External Entity XXE vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers to read arbitrary files via a crafted XML file...

CVE-2014-1626

CVE-2014-1626 affects the MARC::File::XML component of MARC-XML for Perl, before version 1.0.2, as used by Evergreen, Koha, and perl4lib. The vulnerability is an XML External Entity (XXE) issue that allows a context-dependent attacker to read arbitrary files via a crafted XML input. Public refere...

MobileIron 4.5.4 Cross Site Scripting

MobileIron 4.5.4 Device Registration regpin Cross Site Scripting scip AG Vulnerability ID 10847 10/28/2013 http://www.scip.ch/en/?vuldb.10847 I. INTRODUCTION MobileIron is a commercial solution to provide secure access to mobile users in corporate environments. More information is available on th...

How I Got Here: Marc Maiffret

Dennis Fisher talks with Marc Maiffret about his teenage years as a phone phreaker and BBS denizen, the early years of the vulnerability research scene, the Code Red worm and its aftermath and how the security scene has changed in the past 15 years. Download: 10maiffret.mp3...

CentOS Update for ghostscript CESA-2012:1256 centos6

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2012:1256 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Moderate: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Foundation Security Advisory 2011-49

Mozilla Foundation Security Advisory 2011-49 Title: Memory corruption while profiling using Firebug Impact: Critical Announced: November 8, 2011 Reporter: Marc Schoenefeld Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Firefox 3.6.24 Thunderbird 8.0 Thunderbird 3.1.16 Description Marc...

CanadianISP.ca SQL Injection

Title: ====== Canadian ISP Website - SQL Injection Vulnerability Date: ===== 2011-09-23 VL-ID: ===== 282 Reference: ========== http://www.vulnerability-lab.com/getcontent.php?id=282 Introduction: ============= Canadianisp.ca - Is a wholly owned project of Marc Bissonnette / InternAlysis. It was...

Canadian ISP CA Website - SQL Injection Vulnerability

Document Title: =============== Canadian ISP CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=282 Release Date: ============= 2011-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 282...

Marc Merlin BAPPA Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla! Component com_booklibrary - SQL Injection

Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1.5 Tested on: PHP Mysql There is a S...

Webmedia Explorer 6.13.1 Cross Site Scripting

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting

Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably...

Stored XSS vulnerability in Webmedia Explorer

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Mandriva Update for freetype2 MDVSA-2010:201 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:201 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Q&A: Marc Maiffret of eEye

Marc Maiffret, a security researcher known for his controversial opinions on software security and his efforts to get Microsoft specifically to improve the security of its products, is returning to eEye Digital Security, the vulnerability management company he helped found more than a decade ago...

Ubuntu Update for openoffice.org vulnerability USN-949-1

Ubuntu Update for Linux kernel vulnerabilities USN-949-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9491.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for openoffice.org vulnerability USN-949-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for netpbm-free vulnerability USN-934-1

Ubuntu Update for Linux kernel vulnerabilities USN-934-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9341.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for netpbm-free vulnerability USN-934-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...