CVE-2013-4215

The IPXPINGCOMMAND in contrib/checkipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping...

CVE-2013-4215

CVE-2013-4215 affects Nagios Plugins 1.4.16; the IPXPING_COMMAND in contrib/check_ipxping.c allows local users to gain privileges via a symlink race on /tmp/ipxping/ipxping. Root cause is a symlink attack enabling local privilege escalation. Exploitation status and fix details are not provided in...

CVE-2013-4215: Improper Link Resolution Before File Access

The IPXPINGCOMMAND in contrib/checkipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping...

PT-2014-2764

Name of the Vulnerable Software and Affected Versions Nagios Plugins version 1.4.16 Description The issue allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping. This is related to the IPXPING COMMAND in contrib/check ipxping.c. Recommendations For Nagios Plugins versi...

Vulnerabilities in plugins with CU3ER for WordPress, Joomla, SilverStripe and Plone

Hello 3APA3A! Recently I disclosed vulnerabilities in CU3ER http://seclists.org/fulldisclosure/2014/Apr/244. This is popular flash file and in Google's index there are up to million web sites with it inurl:cu3er.swf filetype:swf - now Google shows 994000 results. There are any plugins for differe...

CS, XSS and FPD vulnerabilities in multiple plugins with CU3ER for WordPress

Hello 3APA3A! Recently I disclosed vulnerabilities in CU3ER http://seclists.org/fulldisclosure/2014/Apr/244 and vulnerabilities in plugins with CU3ER for WordPress, Joomla, SilverStripe and Plone http://seclists.org/fulldisclosure/2014/Apr/251. This is popular flash file and in Google's index the...

Fedora Update for wireshark FEDORA-2014-5514

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2014-5514 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2014-2260

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

PT-2014-4590

Name of the Vulnerable Software and Affected Versions Ajenti versions 1.2.13 through 1.2.14 Ajenti version 1.2.15 is not affected, so versions prior to 1.2.15 are vulnerable. However, since 1.2.13 is the lowest version mentioned as vulnerable, the range can be simplified to: Ajenti versions 1.2.1...

PT-2014-4880

Name of the Vulnerable Software and Affected Versions VideoWhisper Webcam plugins for Drupal versions 7.x Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur...

Web application Advanced Security: IronWASP

Web application Advanced Security: IronWASP IronWASP Iron Web application Advanced Security testing Platform is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Thou...

Pyew - A Python tool for static malware analysis

Pyew is a command line python tool to analyse malware. It does have support for hexadecimal viewing, disassembly Intel 16, 32 and 64 bits, PE and ELF file formats it performs code analysis and let you write scripts using an API to perform many types of analysis, follows direct call/jmp instructio...

DEBIAN-CVE-2014-1932

The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in Image.py in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users...

CVE-2014-1609

Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the 1 mcprojectgetattachments function in api/soap/mcprojectapi.php; the 2 newsgetlimitedrows function in core/newsapi.php; the 3...

PT-2014-4254

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.16 Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified parameters to various functions, including mc project get attachments in api/soap/mc project api.php, news get...

CVE-2014-1609: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the 1 mcprojectgetattachments function in api/soap/mcprojectapi.php; the 2 newsgetlimitedrows function in core/newsapi.php; the 3...

CVE-2013-5952: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...

PT-2014-3004

Name of the Vulnerable Software and Affected Versions Joomla! Freichat com freichat component versions prior to 9.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. This can be achieved by manipulating the id or xha...

WordPress Barclaycart Shell Upload

WordPress Barclaycart Plugins Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/barclaycart" Vuln : wp-content/plugins/barclaycart/uploadify/uploadify.php Exploit : "@$uploadfile", 'folder'='/wp-content/plugins/barclaycart/uploadify/';...

Firefox to block all plugins by Default in upcoming release, except Whitelist plugins

The Mozilla Firefox web browser is used by roughly 30% of all Internet users and the company is seriously concerned about the Security of its users for many years. To Improve the Stability, Security and performance of Firefox web browser, Mozilla announced back in 2013 that it planned to enable...