reflected xss in the pageId request parameter in 500page.jsp

A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert1%3C/script%3E code /images/icons/emoticons/warning.png" You can...

Fedora 16 : perl-DBD-Pg-2.19.2-1.fc16 (2012-10871)

Update to latest upstream version, fixed the security bug CVE-2012-1151 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Basilic Remote Command Execution

Hi Dear Sir Basilic is an Automated Bibliography Server for Research Publications Diffusion that use by many research center. there is a RCE bug in basilic/Config/diff.php s could allow an attacker to run system command in server. sample:...

MySQL Remote Root Authentication Bypass

!/usr/bin/python This has to be the easiest "exploit" ever. Seriously. Embarassed to submit this a little. Title: MySQL Remote Root Authentication Bypass Written by: Dave Kennedy ReL1K http://www.secmaniac.com Original advisory here: seclists.org/oss-sec/2012/q2/493 import subprocess ipaddr =...

CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability

CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability A serious security bug in MariaDB and MySQL Disclosed, According to Advisory All MariaDB and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 are vulnerable. This issue got assigned an id CVE-2012-2122. "When a user connects to...

Firefox security bug (proxy-bypass) in current Tor BBs

https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs "A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS...

Tor Warns of Firefox Bug That Threatens User Privacy

The developers at the Tor Project are warning users about a serious flaw in Firefox that’s included the latest version of the Tor Browser Bundle that could enable an attacker to gather information about the servers a victim is using, poking a hole in the privacy and anonymity that Tor is designed...

IP.Board Add-on IP.Gallery 4.2.1 Cross Site Scripting

Exploit Title: IP.Board 3.3.0 Cross Site Scripting Date: 27.03.2012 Author: Sony and Flexxpoint Software Link: http://community.invisionpower.com/ Web Browser : Mozilla Firefox Blog Flexxpoint: http://flexxpoint.blogspot.com/ Blog Sony: http://st2tea.blogspot.com Site : http://insecurity.ro PoC:...

USN-1395-1: PyPAM vulnerability

Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code...

kexec-tools security, bug fix, and enhancement update

1.102pre-154.0.3 - mkdumprd.orig get packed, remove it. 1.102pre-154.0.2 - fix mounting root fs on labeled disk Maxim Uvarov orabug: 13709374 1.102pre-154.0.1 Merge following patches from mkinitrd: - mkinitrd-fix-san-boot.patch - mkinitrd-fix-shared-lib-library-path.patch -...

Fedora 15 : glpi-0.78.5-3.svn17464.fc15 (2012-1534)

This version correct several bugs and a security bug CVE-2012-1037 You are strongly encouraged to update your actual version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

Conduit Mobile Cross Site Scripting

TITLE: Conduit MOBILE PERSISTENT XSS vendor: Conduit Author: r007k17-w Email: [email protected] TWITTER: http://twitter.com/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...

kernel security and bug fix update

2.6.32-220.4.1.el6 - fs Revert 'proc: enable writing to /proc/pid/mem' Johannes Weiner 782649 782650 CVE-2012-0056 2.6.32-220.3.1.el6 - kernel Remove 'WARNING: at kernel/sched.c:5915' Larry Woodman 768288 766051 - x86 kernel: Fix memory corruption in module load Prarit Bhargava 769595 767140 -...

XSS Bug Found in WordPress 3.3

A pair of researchers have identified a cross-site scripting vulnerability in WordPress 3.3, however the bug is only reproducible on installations that were installed using an IP address rather than a domain. The vulnerability was identified and published by Aditya Modha and Samir Shah, who poste...

CoCSoft StreamDown 6.8.0 Buffer Overflow

Stream Down 6.8.0 seh based buffer overflow triggered when processing the server response packet. During the overflow a structured exception handler is overwritten. Module Options msf use exploit/windows/misc/stream/downbof msf undefineddownbof show actions ...actions... msf undefineddownbof set...

Fedora 15 : colord-0.1.15-1.fc15 (2011-16451)

New rebased upstream version. - This release fixes an important security bug: CVE-2011-4349. - Do not crash the daemon if adding the device to the db failed - Fix a memory leak when getting properties from a device Note that Tenable Network Security has extracted the preceding description block...

Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution

$theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line = fgets$handle; if trim$line != 'y' exit; $worked = system"php -q...

CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but...

CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but...

HDWIKI tasteless 0day-vulnerability warning-the black bar safety net

Author: thanks Blog: http://hi.baidu.com/thanks4sec Release date: 2011-10-10 HDWIKI official website: http://kaiyuan.hudong.com/ Affected versions: HDWIKI all ----------------------------------- Looking for a long did not find echo, but tasteless so made a Have thought better of using the method...