Design/Logic Flaw

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function...

Kickstarter Data Breach Publishes 70,000 Startup Ideas

An application programming interface API error on the popular Kickstarter crowdfunding website exposed the plans and descriptions of more than 70,000 yet-to-be launched projects. The API bug exposed project descriptions, goals, durations, rewards, videos, images, locations, categories, and...

Carrier IQ Hires a Chief Privacy Officer

Carrier IQ, a startup heavily bruised last fall by harsh criticism of its handset diagnostic software, today announced it’s hired a high-profile lawyer as its Chief Privacy Officer. According to a news release, Magnolia Mansourkia Mobley, a CIPP and former Verizon executive, will be tasked with...

Microsoft Windows Startup Software Enumeration

This plugin lists software that is configured to run on system startup by crawling the registry entries in : - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run - HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersi on\Run C Tenable Network Security, Inc. include"compat.inc"; if description...

Phusion Passenger Gem for Ruby Arbitrary File Deletion

Phusion Passenger Gem for Ruby contains a flaw that is triggered during application startup. This issue may allow a local attacker to delete arbitrary files via an application process. If the program has completed the start up process this vulnerability is no longer exploitable...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

Seeking Crowd Engagement, Startup Stumbles On New Tool For Crowd Control

When CrowdOptic, a Silicon Valley, venture funded startup, developed a cool application that could stream real-time, context-aware information streams to mobile devices, the applications seemed straight-forward and lucrative enough: a blend of advertising and broadcasting that sports franchises a...

Oracle Hyperion Financial Management Code Execution

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url: http://www.oracle.com/technetwork/middleware/epm/downloads/index.html files tested: SystemInstaller-11121-win32.zi...

Time of Last System Startup

Using the supplied credentials, Nessus was able to determine when the host was last started. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56468; scriptversion"1.7"; scriptcvsdate"Date: 2018/06/19 13:32:15"; scriptnameenglish:"Time of Last System Startup";...

How to Start a SureBackup Job in Troubleshooting Mode

Purpose This article documents how to start an individual VM that has failed SureBackup validation in "Troubleshooting mode." Solution Troubleshooting Mode causes the selected VM in the SureBackup job to be powered on and remains on, despite possible test failures. This can be very useful for...

Kernel.org Linux Site Compromised

Attackers have compromised a number of servers at kernel.org that house the Linux kernel source code and were able to modify a number of files and log user activity on the machines. However, it appears right now as though the Linux source code repositories were not affected by the attack. A messa...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5057)

Mozilla Firefox was updated to version 3.6.20. It fixes bugs and security issues. Following security issues were fixed: Mozilla Foundation Security Advisory 2011-30 - MFSA 2011-30 - Miscellaneous memory safety hazards Mozilla developers and community members identified and fixed several memory...

Mandriva Update for mozilla MDVSA-2011:127 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2011:127 mozilla Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2011-2980

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

CVE-2011-2980

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

CVE-2011-2980

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

Design/Logic Flaw

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

CVE-2011-2980

CVE-2011-2980 is described as a binary planting vulnerability in ThinkPadSensor::Startup that could be exploited to load a malicious DLL into the running Firefox/Thunderbird process. The issue is documented as a potential local attack vector requiring write access to an unspecified directory to p...

Firefox 3.6 < 3.6.20 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.20. As such, it is potentially affected by the following security issues : - A dangling pointer vulnerability exists in an SVG text manipulation routine. CVE-2011-0084 - A DOM accounting error exists in the 'appendChild' JavaScript function...