CVE-2010-3714

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

CVE-2010-3714

TYPO3 SA/remote file disclosure due to a non-typesafe jumpUrl hash comparison in tslib/class.tslib_fe.php affects TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4. An attacker can exploit this to read arbitrary files via unspecified vectors. The issue is documented as CVE-201...

Researchers Find Methods to Kill Persistent 'Evercookie'

The persistent method that security researcher Samy Kamkar introduced last week for storing tracking data on a user’s machine, known as the “Evercookie,” is even more worrisome when used on mobile devices, according to another researcher’s analysis. The Evercookie is a simple method for forcing a...

CVE-2000-0248

creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16858 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/piranhapasswdexec.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-3552

creationtimestamp| type| source ---|---|--- 2010-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15241 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16587 2018-05-29 15:50:33+00:00| seen|...

Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote File Disclosure, Cross-Site Scripting XSS, Privilege Escalation and Denial of Service. Component Type: TYPO3 Core Affected Versions: 4.2.14 and below, 4.3.6 and below, 4.4.3 and below Vulnerability Types: Remote File Disclosure,...

Ad Groups Try to Make Opting Out of Tracking Ads Easier

In the latest attempt to allay consumers’ rising fears about the massive amounts of data that online advertisers collect about them, an amalgamation of industry groups is planning to launch a new self-regulation effort meant to let users decide not to be tracked by advertisers. The program will...

Fedora Update for roundup FEDORA-2010-12269

Check for the Version of roundup OpenVAS Vulnerability Test Fedora Update for roundup FEDORA-2010-12269 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for roundup FEDORA-2010-12261

Check for the Version of roundup OpenVAS Vulnerability Test Fedora Update for roundup FEDORA-2010-12261 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2007-4776

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16680 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/msvisualbasicvbp.rb 2025-02-06 03:13:38+00:00...

[SECURITY] Fedora 14 Update: roundup-1.4.15-1.fc14

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

[SECURITY] Fedora 13 Update: roundup-1.4.15-1.fc13

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

[SECURITY] Fedora 12 Update: roundup-1.4.15-1.fc12

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

Researcher Claims 'Evercookie' Can't Be Removed

Call it “Frankencookie:” a security researcher has released a tracking cookie that he claims is nearly impossible to remove. Dubbed “evercookie,” it is designed to raise awareness about the ease with which Web site operators can evade privacy tools designed to eliminate shield visitors’ privacy...

CVE-2001-1583

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16322 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/lpd/sendmailexec.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2005-4145

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16397 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/lyrislistmanagerweakpass.rb 2025-02-06...

CVE-2010-0103

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16390 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backdoor/energizerduopayload.rb 2018-05-29 15:50:33+00:0...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

CVE-2010-3171

The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random number generator that is seeded only once per document object, which makes it easier for remote attackers to track a user, or trick a user into acti...

Visitors Google Map Lite 1.0.1 mod_visitorsgooglemap SQL Injection

Exploit for php platform in category web applications ================================================================== Visitors Google Map Lite 1.0.1 modvisitorsgooglemap SQL Injection ================================================================== - Discovered by : Chip D3 Bi0s - Email :...