Iciniti Store - SQL Injection

Iciniti Store - SQL Injection Sense of Security - Security Advisory - SOS-12-003 Release Date. 06-Mar-2012 Last Update. - Vendor Notification Date. 28-Jul-2011 Product. Iciniti Store Platform. Windows Affected versions. 4.3.3683.31484 verified, and possibly others Severity Rating. High Impact...

PostgreSQL 8.x/9.x 存在多个安全漏洞

CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 PostgreSQL是一款对象关系型数据库管理系统，支持扩展的SQL标准子集 PostgreSQL存在多个安全漏洞，允许恶意用户绕过部分安全限制，进行伪造攻击或操作某些数据 -在触发函数上没有对CREATE TRIGGER进行正确的权限检查，可利用此漏洞标记触发函数为SECURITY DEFINER，可授权EXECUTE权限 -在校验SSL证书的公用名时不正确把名称截断为32个字符，可导致不正确校验伪造证书...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: mmhutinfo, npindexedsearchstat, rzcolorbox, t3cpodcasts, winninggame, tgmgallery, tgmvgallery, bpsshib, devnullrobots, dhcinflationcal, damfrontend, rtgfiles, mgrooms, gridelements Release Date: September 28,...

Joomla! 1.5 / 1.6 JFilterinput Cross Site Scripting Bypass

Exploit Title: Joomla! JFilterInput XSS Bypass Date: 1 February 2011 Author: Jeff Channell Software Link: http://www.joomla.org Version: 1.5.22, 1.6.0 Tested on: PHP5, MySQL5 Joomla! 1.5 and 1.6 rely on the JFilterInput class to sanitize user-supplied html. This class attempts to parse any given...

FreeBSD Ports: proftpd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

BizDir 5.10 Cross Site Scripting

www.eVuln.com advisory: Non-persistent XSS in BizDir Summary: http://evuln.com/vulns/158/summary.html Details: http://evuln.com/vulns/158/description.html -----------Summary----------- eVuln ID: EV0158 Software: BizDir Vendor: LEXIPIXEL Version: v.05.10 Critical Level: low Type: Cross Site...

Perl CGI.pm Header Values Newline Handling Unspecified Security Vulnerability

Perl CGI.pm is prone to an unspecified security vulnerability related to handling of newlines embedded in header values. OpenVAS Vulnerability Test $Id: gbperlCGI45145.nasl 5323 2017-02-17 08:49:23Z teissa $ Perl CGI.pm Header Values Newline Handling Unspecified Security Vulnerability Authors:...

JomSocial 1.8.8 Shell Upload Vulnerability

Exploit for php platform in category web applications ========================================== JomSocial 1.8.8 Shell Upload Vulnerability ========================================== There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension fo...

[security bulletin] HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02280158 Version: 1 HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon ...

FreeBSD Ports: mDNSResponder

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exim < 4.72 RC2 Multiple Vulnerabilities

Exim is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; ifdescription...

PT-2010-2709 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted Shockwave file. This is due to the improper...

Sun Java System Directory Server LDAP Search Request DoS Vulnerability (Jan 2010)

Sun Java System Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability

IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. A remote attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely crash the application, denying service to legitimate users...

SQL injection in FreePBX 2.5.1

Exploit for unknown platform in category web applications ============================== SQL injection in FreePBX 2.5.1 ============================== Advisory Name: SQL injection in FreePBX 2.5.1 Internal Cybsec Advisory Id: 2010-0103 Vulnerability Class: SQL injection Release Date: 15/01/2010...

Wyse Rapport Hagent Fake Hserver Command Execution

$Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'timeout...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "CoolURI" cooluri, "Reset backend password" cwtresetbepassword, "datamints Newsticker" datamintsnewsticker, "Gobernalia Front End News Submitter" gbfenewssubmit, "Mailform" mailform, "Myth download" mythdownloa...

CentOS Security Advisory CESA-2009:1102 (cscope)

The remote host is missing updates to cscope announced in advisory CESA-2009:1102. CESA-2009:1102 64273 2 $Id: ovcesa20091102.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1102 cscope Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-6389 (drupal-views)

The remote host is missing an update to drupal-views announced via advisory FEDORA-2009-6389. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

CentOS Security Advisory CESA-2009:0352 (gstreamer-plugins-base)

The remote host is missing updates to gstreamer-plugins-base announced in advisory CESA-2009:0352. CESA-2009:0352 63821 2 $Id: ovcesa20090352.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0352 gstreamer-plugins-base Authors: Thomas Reinke Copyright:...