3506 matches found
[SECURITY] Fedora 8 Update: liferea-1.4.13-2.fc8
Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...
[SECURITY] Fedora 7 Update: liferea-1.4.13-2.fc7
Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...
Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure
Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...
podcast-rfidisclose.txt
Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...
[SECURITY] Fedora 8 Update: liferea-1.4.11-2.fc8
Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...
[SECURITY] Fedora 8 Update: blam-1.8.3-13.fc8
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 7 Update: liferea-1.4.9-2.fc7
Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...
Debian Security Advisory DSA 1459-1 (gforge)
The remote host is missing an update to gforge announced via advisory DSA 1459-1. OpenVAS Vulnerability Test $Id: deb14591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1459-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 1477-1 (yarssr)
The remote host is missing an update to yarssr announced via advisory DSA 1477-1. OpenVAS Vulnerability Test $Id: deb14771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1477-1 yarssr Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1477-1 : yarssr - missing input sanitising
Duncan Gilmore discovered that yarssr, an RSS aggregator and reader, performs insufficient input sanitising, which could result in the execution of arbitrary shell commands if a malformed feed is read. Due to a technical limitation of the archive management scripts, the fix for the old stable...
yarssr RSS reader shell characters vulnerability
No description provided...
[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...
lxblog rss.php爆路径
$cid=int$GET'cid'; $uid=int$GET'uid'; $Rssnewnum=20; $Rsslistnum=20; $Rssupdatetime=10; $cachepath=DP.'data/cache/rss.php'.$cid.'cache.php'; lxblog 暂无 www.lxblog.net/ http://www.XXXX.com/blog/rss.php?cid=12345 http://www.XXXX.com/blog/data/cache/rss.php12345cache.php...
Debian: Security Advisory (DSA-944-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
Sql injection
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
CVE-2008-0173
CVE-2008-0173 affects Gforge, with SQL injection in scripts related to RSS exports due to insufficient input validation in CGI parameters. Affected versions include 4.6.99 and earlier. Remote attackers could potentially execute arbitrary SQL commands via those parameters. Debian (DSA-1459-1) and ...