Design/Logic Flaw

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

CVE-2010-5200

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information...

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

CVE-2010-5200

KeePass Password Safe prior to 1.18 is vulnerable to an untrusted search path/LPE via a Trojan horse DLL placed in the current working directory, demonstrated by a directory containing a .kdb file. Affected products: KeePass Password Safe versions 1.17 and earlier. Root cause: DLL hijack in the c...

CVE-2010-5196

Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll file in the current working directory, as demonstrated by a directory that contains a .kdbx file. NOTE: some of these details are obtained from third party...

KLA10431 LPE vulnerability in KeePass Password Safe

An untrusted path vulnerability was found in KeePass Password Safe. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories - Related products KeePass-Password-Safe CVE list CVE-2010-5200 high Solution...

Fedora Update for nut FEDORA-2012-8694

Check for the Version of nut OpenVAS Vulnerability Test Fedora Update for nut FEDORA-2012-8694 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

WordPress Cloud Safe 365 Plugin - Remote File Disclosure

Cloud Safe 365 plugin is prone to a remote file disclosure vulnerability. It allows an attacker to view local files in the context of the web server process. Other attacks are also possible. Solution Update the plugin...

ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s

The official ruby site reports: Vulnerabilities found for Exceptiontos, NameErrortos, and nameerrmesgtos which is Ruby interpreter-internal API. A malicious user code can bypass $SAFE check by utilizing one of those security holes. Ruby's $SAFE mechanism enables untrusted user codes to run in $SA...

Fedora 16 : gdb-7.3.50.20110722-16.fc16 (2012-6614)

Update 'set auto-load' patchset and the --with-auto-load-safe-path setting. Security fix for loading untrusted inferiors, see 'set auto-load'. Security fix for loading untrusted inferiors, see 'set auto-load'. Workaround crashes from stale frameinfo pointer BZ 804256. Security fix for loading...

Scientific Linux Security Update : perl on SL3.x, SL4.x i386/x86_64

Perl is a high-level programming language commonly used for system administration utilities and web programming. The Safe extension module allows users to compile and execute Perl code in restricted compartments. The Safe module did not properly restrict the code of implicitly called methods such...

Scientific Linux Security Update : perl on SL5.x i386/x86_64

Perl is a high-level programming language commonly used for system administration utilities and web programming. The Safe extension module allows users to compile and execute Perl code in restricted compartments. The File::Path module allows users to create and remove directory trees. The Safe...

Scientific Linux Security Update : ruby on SL3.x, SL4.x, SL5.x i386/x86_64

The Ruby DNS resolver library, resolv.rb, used predictable transaction IDs and a fixed source port when sending DNS requests. A remote attacker could use this flaw to spoof a malicious reply to a DNS query. CVE-2008-3905 Ruby's XML document parsing module REXML was prone to a denial of service...

KeyPass Password Safe 1.22 Cross Site Scripting

Exploit for php platform in category web applications Title: ====== KeyPass Password Safe v1.22 - Software Filter Vulnerability Introduction: ============= KeePass is a very famous & free open source password manager, which helps you to manage your passwords in a secure way. You can put all your...

Google Data Shows Attack and Phishing Sites Increasing Rapidly

The number of compromised sites detected each month by Google’s antimalware and anti-phishing systems has been dropping rather steadily from a peak of more than 300,000 in early 2009 and is now down around 150,000. However, the company’s statistics also show that the number of outright malicious...

Unrestricted file upload

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct...

[SECURITY] Fedora 17 Update: nut-2.6.3-4.fc17

These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...

[SECURITY] Fedora 16 Update: nut-2.6.3-4.fc16

These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...