Semantic SM Short URL Script 2.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

Drupal OSF for Drupal Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. A cross-site...

Several Critical Flaws Patched in Drupal Module

There are several critical vulnerabilities in a middleware layer used in Drupal, including both cross-site scripting and cross-site request forgery bugs, that can be exploited remotely. The vulnerabilities are in the Open Semantic Framework, which is a third-party project and not part of the Drup...

OSF for Drupal - Critical - Multiple vulnerabilities - SA-CONTRIB-2015-134

The Open Semantic Framework OSF for Drupal is a middleware layer that allows structured data RDF and associated vocabularies ontologies to "drive" tailored tools and data displays within Drupal. The module is vulnerable to reflected Cross Site Scripting XSS because it did not sufficiently filter...

[SECURITY] Fedora 21 Update: pcre-8.35-12.fc21

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

OpenGraphiti: Data Visualization Engine

OpenGraphiti is a free and open source 3D data visualization engine for data scientists to visualize semantic networks and to work with them. It offers an easy-to-use API with several associated libraries to create custom-made datasets. It leverages the power of GPUs to process and explore the da...

The U.S. Department of Energy's security threat intelligence use cases for Flexible Transform-vulnerability warning-the black bar safety net

2015-01-07 2 2:0 5 ! Slide 1 Recently will continue to share the collection to the security threat intelligence-related material, the first a first to a U.S. Department of Energy's security threat intelligence practice. Security threat intelligence technology in the United States has been widely...

Python -- HTTP Header Injection in Python urllib

Guido Vranken reports: HTTP header injection in urrlib2/urllib/httplib/http.client with newlines in header values, where newlines have a semantic consequence of denoting the start of an additional header line...

MediaWiki < 1.19.10 / 1.21.4 / 1.22.1 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by the following vulnerabilities : - Escape sequences are not properly sanitized when passed to the 'Sanitizer::checkCss' class, which allows a remote attacker to conduct cross-site scripting attacks...

Fedora Update for nodejs-semver FEDORA-2013-11780

Check for the Version of nodejs-semver OpenVAS Vulnerability Test Fedora Update for nodejs-semver FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 19 Update: nodejs-semver-2.0.10-1.fc19

The semantic version comparison library for the Node.js package manager np m...

[SECURITY] Fedora 18 Update: nodejs-semver-2.0.10-1.fc18

The semantic version comparison library for the Node.js package manager np m...

[Dexter] A Free Tool for Mobile (Android) Malware Analysis

Bluebox Labs just released Dexter, a free tool which wants to help information security professionals and malware analysts to analyze Android mobile applications in order to find malware and vulnerabilities. .png Dexter combines manual and automatic static program analysis to provide a better...

Fedora Update for shared-desktop-ontologies FEDORA-2011-13417

Check for the Version of shared-desktop-ontologies OpenVAS Vulnerability Test Fedora Update for shared-desktop-ontologies FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Semantic Enterprise Wiki <= 1.6.0_2 XSS Vulnerability - Active Check

Semantic Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1212

CVE-2012-1212 concerns a cross-site scripting (XSS) vulnerability in Semantic Enterprise Wiki (SMW+) via the smwfOnSfSetTargetName path in SMW_Initialize.php. Affected versions are SMW+ 1.5.6 and 1.6.0_2 and earlier; the issue is triggered remotely by supplying a crafted target parameter to index...

CVE-2012-1212: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMWInitialize.php in Semantic Enterprise Wiki SMW+ 1.5.6, 1.6.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to...

PT-2012-3135

Name of the Vulnerable Software and Affected Versions Semantic Enterprise Wiki SMW+ versions 1.5.6, 1.6.0 2 and earlier Description The issue is related to a cross-site scripting XSS vulnerability in the smwfOnSfSetTargetName function. This vulnerability allows remote attackers to inject arbitrar...

Oracle Database Multiple Vulnerabilities (July 2006 CPU)

The remote Oracle database server is missing the July 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Change Data Capture CDC - Core RDBMS - Data Pump Metadata API - Dictionary - Export - InterMedia - OCI - Oracle ODBC Driver...

[SECURITY] Fedora 16 Update: shared-desktop-ontologies-0.8.0-1.fc16

The vision of the Social Semantic Desktop defines a user=E2=80=99s personal information environment as a source and end-point of the Semantic Web: Knowledge workers comprehensively express their information and data with respect to their own conceptualizations. Semantic Web languages and protocol...