2335 matches found
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Exploit Title: Roundcube Webmail Stored XSS. Date: 14/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://roundcube.net Software Link: http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/roundcubemail-0.8.0.tar.gz/download Version: 0.8.0...
Scientific Linux Security Update : automake on SL5.x i386/x86_64
Automake-generated Makefiles made certain directories world-writable when preparing source archives, as was recommended by the GNU Coding Standards. If a malicious, local user could access the directory where a victim was creating distribution archives, they could use this flaw to modify the file...
Scientific Linux Security Update : libxml2 on SL4.x i386/x86_64 (20120111)
The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path Language XPath, which is a language for addressing parts of an XML document. A heap-based buffer overflow flaw was found in the way libxml2 decoded entity...
Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20120315)
The glibc packages provide the standard C and standard math libraries used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. An integer overflow flaw was found in the implementation of the printf functions family. This could allow an attacker...
Scientific Linux Security Update : vsftpd on SL4.x i386/x86_64
The version of vsftpd as shipped in Red Hat Enterprise Linux 4 when used in combination with Pluggable Authentication Modules PAM had a memory leak on an invalid authentication attempt. Since vsftpd prior to version 2.0.5 allows any number of invalid attempts on the same connection this memory le...
CentOS Update for libxml2 CESA-2012:0324 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for libxml2 CESA-2012:0018 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 17 Update: firefox-14.0.1-1.fc17
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
RedHat Update for libxml2 RHSA-2011:1749-03
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 17 Update: asterisk-10.5.1-1.fc17
Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...
Woman Sues LinkedIn for $5 Million Over Data Breach
Less than two weeks after learning more than 6 million stolen LinkedIn passwords were posted online, an Illinois woman is leading a class-action lawsuit against the professional networking site for using inadequate security tools to protect its members’ data. Katie Szpyrka, who registered for a...
Airlock WAF 4.2.4 Overlong UTF-8 Sequence Bypass
Exploit for multiple platform in category dos / poc title: Airlock WAF overlong UTF-8 sequence bypass product: Airlock vulnerable version: = 4.2.4 without hotfix HF4213 fixed version: 4.2.5 impact: critical homepage: http://www.ergon.ch/ found: 2012-04-05 by: G. Wagner SEC Consult Vulnerability L...
[SECURITY] Fedora 16 Update: firefox-13.0-1.fc16
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 17 Update: firefox-13.0-1.fc17
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Industry Groups Bid To Control New .Bank And .Insurance TLDs
Two financial industry groups: The American Bankers Association ABA and the Financial Services Roundtable announced on Thursday that they have applied to the Internet Corporation for Assigned Names and Numbers ICANN to operate to top level Internet domains, .bank and .insurance, on behalf of the...
Report Predicts Huge Hike in Employers Monitoring Social Media
In addition to watching what you say at the office, you may want to be extra careful what you post about work on blogs, Facebook, YouTube and Twitter. This admonishment is not new, but a Gartner report predicts up to 60 percent of corporations worldwide will monitor employees’ social media use fo...
[SECURITY] Fedora 17 Update: asterisk-10.3.1-1.fc17
Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...
[SECURITY] Fedora 15 Update: firefox-12.0-1.fc15
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...