CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

Ubuntu Update for apturl USN-1132-1

Ubuntu Update for Linux kernel vulnerabilities USN-1132-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11321.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for apturl USN-1132-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for exim4 USN-1130-1

Ubuntu Update for Linux kernel vulnerabilities USN-1130-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11301.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for exim4 USN-1130-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for postfix USN-1131-1

Ubuntu Update for Linux kernel vulnerabilities USN-1131-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11311.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for postfix USN-1131-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

A DNS suffix may lead to cross-domain security issues-vulnerability warning-the black bar safety net

We all know that dhcpd can be set in which the client's DNS suffix. For example, if we set the DNS suffix"sb.com”when we visit www. sb. com, all clients will use the DHCP server and try the following sequence for resolution. Note: the following green font are representative of the Main Domain Nam...

Ubuntu Update for usb-creator USN-1127-1

Ubuntu Update for Linux kernel vulnerabilities USN-1127-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11271.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for usb-creator USN-1127-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for perl USN-1129-1

Ubuntu Update for Linux kernel vulnerabilities USN-1129-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11291.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for perl USN-1129-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for php5 USN-1126-1

Ubuntu Update for Linux kernel vulnerabilities USN-1126-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11261.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for php5 USN-1126-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1121-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for firefox USN-1121-1

Ubuntu Update for Linux kernel vulnerabilities USN-1121-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11211.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for firefox USN-1121-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1122-2: Thunderbird vulnerabilities

USN-1122-1 fixed vulnerabilities in Thunderbird for Lucid and Maverick. This update provides the corresponding fixes for Natty. Original advisory details: It was discovered that there was a vulnerability in the memory handling of certain types of content. An attacker could exploit this to possibl...

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC

Exploit for php platform in category web applications Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //|...

USN-1127-1: usb-creator vulnerability

Evan Broder discovered that usb-creator did not properly enforce restrictions when performing privileged disk operations. A local attacker could use this flaw to perform certain disk operations, such as unmount arbitrary mountpoints...

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery (Add Administrator Account)

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //| \ || / \ || / \ / \ / \ / \ / .-""""-. '..'.-""""-...

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery (Add Administrator Account)

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery Add Administrator Account Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / ...

USN-1121-1: Firefox vulnerabilities

Boris Zbarsky, Gary Kwong, Jesse Ruderman, Michael Wu, and Ted Mielczarek discovered multiple memory vulnerabilities. An attacker could exploit these to possibly run arbitrary code as the user running Firefox. CVE-2011-0079 It was discovered that there was a vulnerability in the memory handling o...

Canonical releases Ubuntu 11.04 Alpha 3 !

As expected, Canonical has released a third alpha for Ubuntu 11.04, code named "Natty Narwhal". This development milestone is the last of three planned alpha releases, which will be followed by two betas – as previously previously reported, there will be no release candidate for Ubuntu 11.04. Nat...

CVE-2011-0725

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...

CVE-2011-0725

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...

CVE-2011-0725

The CVE-2011-0725 entry concerns Aptdaemon 0.40 on Ubuntu 10.10/11.04. Affected component: org.debian.apt.UpdateCachePartially (worker.py). Root cause: improper filtering of certain D‑Bus arguments via the Aptdaemon interface, enabling an absolute path traversal. Impact: local users can read arbi...