SA-CONTRIB-2012-036 - Multiple Modules Unsupported

CVE: CVE-2012-2056 Content Lock Is a module that prevents users from concurrent editing of nodes. This module does not use a token for unlocking a content lock. This leads to a CSRF attack vector. CVE: CVE-2012-2057 Ubercart Bulk Stock Updater is an extension module for Ubercart 2.x running on...

CVE-2011-0085

Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater...

Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability

Document Title: =============== Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 153 Product & Service Introduction: =============================== Parallels Plesk Panel ist...

Gentoo Security Advisory GLSA 201009-08 (python-updater)

The remote host is missing updates announced in advisory GLSA 201009-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201009-08 (python-updater)

The remote host is missing updates announced in advisory GLSA 201009-08. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Kaspersky Updater GUI 2.2.0.72 Commandline Vulnerability

Exploit for windows platform in category local exploits ======================================================== Kaspersky Updater GUI 2.2.0.72 Commandline Vulnerability ======================================================== Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author :...

GLSA-201009-08 : python-updater: Untrusted search path

The remote host is affected by the vulnerability described in GLSA-201009-08 python-updater: Untrusted search path Robert Buchholz of the Gentoo Security Team reported that python-updater includes the current working directory and subdirectories in the Python module search path sys.path before...

python-updater: Untrusted search path

Background python-updater is a script used to remerge python packages when changing Python version. Description Robert Buchholz of the Gentoo Security Team reported that python-updater includes the current working directory and subdirectories in the Python module search path sys.path before calli...

Adobe Releases Quarterly Patches, Enables Auto Updater

Adobe on Tuesday released its quarterly load of patches, including an update for Adobe Reader that fixes several critical vulnerabilities. The company also used the opportunity to enable the new automatic updater in both Reader and Acrobat. The vulnerabilities in Reader could give an attacker the...

Adobe Patches, Auto-Updater Coming on April 13

Adobe today announced plans to ship a critical security patch next Tuesday April 13, 2010 to fix multiple high-risk security holes in its Reader and Acrobat product lines. The patches will be released alongside a new automatic updater software that the company hopes will speed up the downloading...

Directory traversal

Directory traversal vulnerability in the Magic Updater comjoomlaupdater component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1307

Nuclei templates confirm a Local File Inclusion in Joomla! via the Magic Updater (com_joomlaupdater). The vulnerability arises from a directory traversal in the index.php controller parameter, allowing remote attackers to read arbitrary files. Affected component: Joomla! Magic Updater (com_joomla...

CVE-2010-1307

Directory traversal vulnerability in the Magic Updater comjoomlaupdater component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1307: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Magic Updater comjoomlaupdater component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla Magic Updater Local File Inclusion

================================================================================================ Title : Joomla Magic Updater comjoomlaupdater LFI Vulnerability Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Blog : http://c0li.blogspot.com/...

Joomla Magic Updater com_joomlaupdater LFI Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla Magic Updater comjoomlaupdater LFI Vulnerability ========================================================...

Joomla! Component Magic Updater - Local File Inclusion

================================================================================================ Title : Joomla Magic Updater comjoomlaupdater LFI Vulnerability Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Blog : http://c0li.blogspot.com/...

Adobe PDF Reader Gets Another Security Makeover

Adobe has released a mega-update for its Reader and Acrobat software products to fix a total of eight documented security vulnerabilities. The update comes with significant security improvements, including the on-by-default addition “Enhanced Security,” a feature that provides a set of default...

On Adobe, Their Silent Updater and Becoming a Target for Attackers

Ryan Naraine and Dennis Fisher discuss all of the news and criticism concerning Adobe this week, including their release of a silent updater and the company becoming a top target for attackers. SHOW NOTES Despite Danger, Adobe Says Javascript Support Important Tough Road Ahead for Adobe on Securi...

Microsoft Plans Quiet January Patch Tuesday

Microsoft’s first Patch Tuesday for 2010 will be very light: A solitary bulletin addressing a vulnerability that is rated critical only for Windows 2000 users. According to Redmond’s advance notice for the next batch of patches due on January 12, the bulletin is rated “low” for every other affect...