Ubuntu 15.10 : linux vulnerabilities (USN-2843-1)

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 Guoyong Gang discovered th...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2842-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2842-2 advisory. Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2844-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2844-1 advisory. Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An...

NEOJAPAN desknet NEO Directory Traversal Vulnerability

NEOJAPAN desknet NEO is Japan's NEOJAPAN company a Web application framework. A directory traversal vulnerability exists in NEOJAPAN desknet NEO versions 2.0R1.0 through 2.5R1.4. A remote attacker can exploit this vulnerability to read arbitrary files with specially crafted parameters...

CVE-2015-2990

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter...

CVE-2015-2990

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter...

CVE-2015-2990

Summary: CVE-2015-2990 is a directory traversal vulnerability in desknet NEO (NEOJAPAN) where zhtml.cgi fails to verify HTML parameters. Affected product/versions: desknet’s NEO, versions 2.0R1.0 through 2.5R1.4. Vulnerability details: An authenticated user may read arbitrary files on the server ...

desknet's NEO vulnerable to directory traversal

Overview desknet's NEO provided by NEOJAPAN Inc. contains a directory traversal CWE-22 vulnerability where it fails to verify html parameter in zhtml.cgi. Hiroyuki Yamashita of M Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

PJ CGI Neo Review Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9524/info It has been reported that PJ CGI Neo Review may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory by using '../' character...

phpsmartcom 0.2 (lfi/sql) Multiple Vulnerabilities

No description provided by source. fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

Joomla Component com_virtuemart 1.0 - SQL Injection Vulnerability (product_id)

No description provided by source. Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0...

PHP-Nuke 7.x Journal Module Search.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20829/info The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

PHP-Nuke 7.x Block-Old_Articles.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22037/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit

No description provided by source. ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host=localhost; $path=/phpnuke/; $prefix=nuke; $port=80; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data=query=fooaa&eid=foo'//UNION SELECT pwd as title FR...

Artiphp CMS 5.5.0 database backup disclosure Exploit-vulnerability warning-the black bar safety net

? php / Artiphp CMS 5.5.0 Database Backup Disclosure Exploit Author: Artiphp www.2cto.com http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Description: Artiphp stores database backups using...

Artiphp CMS 5.5.0 Cross Site Scripting

Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities Vendor: Artiphp Product web page: http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Desc: Artiphp CMS suffers from multiple...

Report: Anonymous Targets Neo-Nazis

The Anonymous Internet collective’s campaign against groups with whom they disagree surged into 2012 with “Operation Blitzkrieg,” which is targeting Neo-Nazi groups in Germany. Their latest effort includes a Wikileaks-style Website, Nazi-leaks.net, to uncover and expose the identities of...

DEBIAN-CVE-2011-4357

Format string vulnerability in the pcgierror function in python/neocgi.c in the Python CGI Kit neocgi module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers that are not properly handled...

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns Anonymous Hackers have successfully hacked the neo-Nazi website and published the database of its 16000 membership application database containing personal data of some applicants from all around the country. The hack w...

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns Anonymous Hackers have successfully hacked the neo-Nazi website and published the database of its 16000 membership application database containing personal data of some applicants from all around the country. The hack w...