MGASA-2015-0464 Updated moodle packages fix security vulnerability

In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...

IT-Grundschutz M4.340: Einsatz der Windows Benutzerkontensteuerung UAC ab Windows Vista

IT-Grundschutz M4.340: Einsatz der Windows Benutzerkontensteuerung UAC ab Windows Vista. Stand: 15. Ergänzungslieferung 15. EL. OpenVAS Vulnerability Test $Id: GSHBM4340.nasl 8004 2017-12-06 09:02:19Z emoss $ IT-Grundschutz, 15. EL, Maßnahme 4.340 Authors: Thomas Rotter Copyright: Copyright c 201...

Pentaho < 4.5.0 - User Console XML Injection

======================================================================== title: Pentaho User Console XML Injection Vulnerability program: Pentaho BI User Console vulnerable version: Pentaho was injected into the XML of the client's POST request. This tag defines an external entity, xxe8295c, whic...

MS13-005 HWND_BROADCAST Low to Medium Integrity Privilege Escalation (CVE-2013-0008)

No description provided by source. / ms13-005-funz-poc.cpp - Drive a Medium IL cmd.exe via a Low IL process and message broadcasted Copyright C 2013 Axel "0vercl0k" Souchet - http://www.twitter.com/0vercl0k This program is free software: you can redistribute it and/or modify it under the terms of...

Mysql mof extension vulnerability example and prevention-vulnerability and early warning-the black bar safety net

Mysql mof extension vulnerability prevention methods Online disclosure some of the use of the code: pragma namespace“\\\\.\\ root\\subscription” instance of EventFilter as $EventFilter EventNamespace = "Root\\Cimv2"; Name = "filtP2"; Query = "Select From InstanceModificationEvent" "Where...

[SECURITY] Fedora 17 Update: openstack-nova-2012.1-0.10.rc1.fc17

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

PT-2011-24: Security Restrictions Bypassing in Arbor Peakflow X

The specialists of the Positive Research center have detected a Security Restrictions Bypassing vulnerability in Arbor Peakflow X. Any user registered in the system can perform the following actions: - Lock any system users with any privileges except the user "admin." - Unlock any locked system...

Joomla Component com_eportfolio Upload Vulnerability

No description provided by source. Name : Joomla comeportfolio Upload Vulnerability Date : june, 20 2010 Critical Level : HIGH Vendor Url : http://www.joomplace.com/e-portfolio/e-portfolio-description.html Google Dork:inurl:comeportfolio Author : Sid3^effects aKa HaRi shellc99atyahoo.com special...

[SECURITY] Fedora 13 Update: sudo-1.7.2p6-1.fc13

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

Need ability to limit use of remote API to certain users, or a certain group

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-7913. panel The remote API presents opportunities for denial of service attack. For example: RemoveSpace for a space with many...

TorrentFlux startpop.php torrent Script Insertion

http://www.stevenroddis.com.au/2006/10/13/torrentflux-startpopphp-torrent-script-insertion/ TITLE: TorrentFlux “startpop.php” “torrent” Script Insertion CRITICAL: Not Critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: TorrentFlux 2.x DESCRIPTION: I have discovered a vulnerability ...

Without the password you can also enter the shared folder-vulnerability warning-the black bar safety net

| ! --- Figure 1 ! --- If your colleaguesor leadership, huh? not too good at write down the long password that you do on your machine is he specifically assigned a no-password user, so the user just enter the username you can access you assign him resources? First right-click“My Computer”, then...

[VulnWatch] iDEFENSE Security Advisory 02.08.05: IBM AIX auditselect Local Format String Vulnerability

IBM AIX auditselect Local Format String Vulnerability iDEFENSE Security Advisory 02.08.05 www.idefense.com/application/poi/display?id=193&type=vulnerabilities February 08, 2005 I. BACKGROUND The auditselect program is a setuid root application, installed by default under multiple versions of IBM...

hackingcitrix.txt

Hacking Citrix: Last Updated: Oct 2nd 9:00PM Found 'Respond to Broad Cast Packets' to NOT break Ian Viteks scanner, so much for that! - Oct 1st, 2002 10:36AM Minor Corrections in Introduction - Introduction - How Citrix Works - Peeling Citrix Back - Securing Citrix... Sort of. .Introduction Citri...

Check Point FireWall-1 HTTP Client Authentication Detection

The Check Point FireWall-1 Client Authentication web server is used to authenticate a user via HTTP. Once authenticated, the user can get more privileges on the network ie: get access to hosts which were previously blocked by the firewall. C Tenable Network Security, Inc. include"compat.inc";...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...