Updated virtuoso-opensource package fixes security vulnerabilities

The virtuoso-opensource package has been updated to version 6.1.8 and two additional upstream patches from versions 7.1.0 and 7.2.0 with additional fixes for unspecified security issues have been added...

Ubuntu: Security Advisory (USN-2626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3227-1 : movabletype-opensource - security update

John Lightsey discovered a format string injection vulnerability in the localisation of templates in Movable Type, a blogging system. An unauthenticated remote attacker could take advantage of this flaw to execute arbitrary code as the web server user. %NASLMINLEVEL 70300 C Tenable Network...

Debian Security Advisory DSA 3227-1 (movabletype-opensource - security update)

John Lightsey discovered a format string injection vulnerability in the localisation of templates in Movable Type, a blogging system. An unauthenticated remote attacker could take advantage of this flaw to execute arbitrary code as the web server user. OpenVAS Vulnerability Test $Id: deb3227.nasl...

Debian: Security Advisory (DSA-3227-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-3183-1 movabletype-opensource - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3183-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :comawesom ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...

AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/...

[FGscanner] Find hidden contents using dictionary-like attack

FGscanner is a completely rewritten version of littlescanner script. FGscanner is an opensource advanced web directory scanner to find hidden contents on a web server using dictionary-like attack with proxy and tor support. Quick reference for switches Usage: ./fgscan.pl --host=hostname...

Debian DSA-2841-1 : movabletype-opensource - XSS

A cross-site scripting vulnerability was discovered in the rich text editor of the Movable Type blogging engine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2841. The text itself is...

Debian Security Advisory DSA 2841-1 (movabletype-opensource - cross-site scripting)

A cross-site scripting vulnerability was discovered in the rich text editor of the Movable Type blogging engine. OpenVAS Vulnerability Test $Id: deb2841.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 2841-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...

Debian: Security Advisory (DSA-2841-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : qt4-x11, qtbase-opensource-src vulnerability (USN-2057-1)

It was discovered that QXmlSimpleReader in Qt incorrectly handled XML entity expansion. An attacker could use this flaw to cause Qt applications to consume large amounts of resources, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description bloc...

[Hashkill 0.3.1] Password Cracker Tool Released

Hashkill is an opensource hash cracker for Linux that uses OpenSSL. Currently it supports 4 attack methods dictionary, bruteforce, hybrid. Hashkill has 35 plugins for different types of passwords ranging from simple hashes like MD5 and SHA1 to passworded ZIP files and private SSL key passphrases...

[SECURITY] [DSA 2611-1] movabletype-opensource security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2611-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 22, 2013 http://www.debian.org/security/faq -...

Debian DSA-2611-1 : movabletype-opensource - several vulnerabilities

An input sanitation problem has been found in upgrade functions of movabletype-opensource, a web-based publishing platform. Using carefully crafted requests to the mt-upgrade.cgi file, it would be possible to inject OS command and SQL queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 2611-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2611-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 22, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2611-1 (movabletype-opensource - several vulnerabilities)

An input sanitation problem has been found in upgrade functions of movabletype-opensource, a web-based publishing platform. Using carefully crafted requests to the mt-upgrade.cgi file, it would be possible to inject OS command and SQL queries. OpenVAS Vulnerability Test $Id: deb2611.nasl 6611...