4429 matches found
GENU CMS SQL Injection
GENU CMS sqli read.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
FreeBSD : nginx -- potential information leak (29194cb8-6e9f-11e1-8376-f0def16c5c1b)
nginx development team reports : Matthew Daley recently discovered a security problem which may lead to a disclosure of previously freed memory on specially crafted response from an upstream server, potentially resulting in sensitive information leak. %NASLMINLEVEL 70300 C Tenable Network Securit...
Crash when accessing keyframe cssText after dynamic modification — Mozilla
Mozilla community member Daniel Glazman of Disruptive Innovations reported a crash when accessing a keyframe's cssText after dynamic modification. This crash may be potentially exploitable...
SuSE 10 Security Update : curl (ZYPP Patch Number 7937)
This update to curl fixes the following security issue : - Don't set SSLOPALL to avoid potential DTLS sniffing attacks. CVE-2012-0036 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
glibc: __tzfile_read integer overflow to buffer overflow
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...
Important: Red Hat Security Advisory: mod_cluster-native security update
Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Web Server 1.0.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...
http-unsafe-output-escaping NSE Script
Spiders a website and attempts to identify output escaping problems where content is reflected back to the user. This script locates all parameters, ?x=foo&y=bar and checks if the values are reflected on the page. If they are indeed reflected, the script will try to insert ghzhzx"zxc'xcv and chec...
MS11-093: Vulnerability in OLE Could Allow Remote Code Execution (2624667)
The remote Windows host contains a flaw in the way OLE objects are handled in memory. An attacker can exploit this issue by tricking a user into opening a specially crafted OLE object file that could execute arbitrary code in the context of the user. C Tenable Network Security, Inc...
SuSE 10 Security Update : Xen (ZYPP Patch Number 7654)
A security bug was fixed in Xen - A bug was found in the way Xen handles CPUID instruction emulation during VM exits. An unprivileged guest user can potentially use this flaw to crash the guest. CVE-2011-1936 This issue only affected systems running on x86 architecture with Intel processor and VM...
mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2011-46 loadSubScript unwraps XPCNativeWrapper scope parameter 1.9.2 branch MFSA 2011-47 Potential XSS against sites using Shift-JIS MFSA 2011-48 Miscellaneous memory safety hazards rv:8.0 MFSA 2011-49 Memory corruption while profiling using Firebug MFSA 2011-50...
Actions doeditpage,domovepage,docreatepage do not require XSRF token
When checking the application for security leaks, I found that the actions doeditpage, domovepage and docreatepage explicitly set the requireSecurityToken=false in the xwork.xml. This could be a possible leak in an attack scenario. Is there a reason, why these actions should not require the...
SEC Says Public Companies May Need to Disclose Attacks
The Securities and Exchange Commission has issued new guidance to help public companies determine when they may need to disclose an attack–or even a potential attack–in order to make potential investors aware of possible risks to the company’s business. The guidance, which does not constitute a...
shopex password retrieve at the newly generated password may predict vulnerability-vulnerability warning-the black bar safety net
Brief description: shopex in the password place, there are some logic design problems, the cause can be predicted the newly-generated password may be used to attack acquiring others passwords Detailed description: The relevant code /core/shop/controller/ctl. passport. php: function sendPSW...
A2CMS - index.php Local File Disclosure
A2CMS - index.php Local File Disclosure source: https://www.securityfocus.com/bid/49883/info A2CMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive...
Я.Инцидент: Почему я читал ваши СМС?
События прошедшего лета, связанные с утечками конфиденциальных данных в поисковые системы, прямо или косвенно коснулись каждого, кто следит за новостями, любезно предоставляемыми СМИ. Под «системный нож» попали поисковые роботы и персональные данные гражданина РФ. Копнем немного глубже и выясним,...
A2CMS - 'index.php' Local File Disclosure
source: https://www.securityfocus.com/bid/49883/info A2CMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers...
DZ forum to blast a path summary-vulnerability warning-the black bar safety net
1, The manyou/admincp. php? mysuffix=%0A%0DSlhack 2, the ucenter/control/admin/db.php 3, the ucserver/control/admin/db.php 4, the forum.php/admin.php’/XXXXXXX.php 5, the source/class/classcore.php Excerpt from: Little Dragon blog...
Secure Boot in Windows 8 Worries Researchers
Windows 8, like Windows 7 and Vista before it, is being touted as the most secure version of Windows ever. In past releases, many of the security improvements have come through exploit mitigations such as ASLR and DEP and better software security practices during development. In Windows 8, howeve...
