CentOS Update for openssl CESA-2012:0699 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

WAGO IO 758 Default Linux Credentials

Overview This advisory updates the ICS-CERT Alert titled “ICS-ALERT-12-097-01 - WAGO IPC Vulnerabilities” that was posted on the ICS-CERT Web site on April 06, 2012. This alert detailed a vulnerability report of “hard-coded” credentials and improper access controls in the WAGO I/O System 758...

GarrettCom - Use of Hard-Coded Password

Overview Independent security researcher Justin W. Clarke of Cylance Inc. has identified a privilege-escalation vulnerability in the GarrettCom Magnum MNS-6K Management Software application via the use of a hard-coded password. This vulnerability could allow a remote attacker with any level of...

SuSE 10 Security Update : Linux kernel (x86_64) (ZYPP Patch Number 2096)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

CVE-2012-1217

Multiple cross-site scripting XSS vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to 1 prospects.php, 2 prospect.php, or 3 team.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to 1 prospects.php, 2 prospect.php, or 3 team.php...

CVE-2012-1217

Multiple cross-site scripting XSS vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to 1 prospects.php, 2 prospect.php, or 3 team.php...

CVE-2012-1217

CVE-2012-1217 concerns SQL injection in the STHS v2 Web Portal 2.2. Connected sources (OpenVAS tests) indicate the issue affects the application via the ‘team’ parameter, enabling multiple SQLi payloads and data access/modification. The root cause is insufficient input sanitization in the applica...

STHS v2 Web Portal 'team' parameter Multiple SQL Injection Vulnerabilities

STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent...

STHS v2 Web Portal - prospects.php?team SQL Injection

STHS v2 Web Portal - prospects.php?team SQL Injection source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

STHS v2 Web Portal - 'team.php?team' SQL Injection

source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

STHS v2 Web Portal - 'prospects.php?team' SQL Injection

source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

STHS v2 Web Portal 2.2 SQL Injection

================================================= STHS v2 Web Portal 2.2 SQL Injection Vulnerabilty ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 . 3 7 \ \ || / \ 7 1 | | \ | | / /\ / / \ / \ / \ 1 3 | | | \ \ / / ...

CentOS 4 : openssl (CESA-2012:0086)

Updated openssl packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openssl security update

CentOS Errata and Security Advisory CESA-2012:0086 Updated openssl packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Didactum SensorProbe v2.x - Persistent Web Vulnerability

Document Title: =============== Didactum SensorProbe v2.x - Persistent Web Vulnerability Release Date: ============= 2011-08-23 Vulnerability Laboratory ID VL-ID: ==================================== 109 Product & Service Introduction: =============================== Netzwerkgestützte...

SuSE 11.1 Security Update : libpng (SAT Patch Number 4948)

This update of libpng12-0 fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - unknown unknown. CVE-2009-5063: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Desig...

BlogPHP v2 Persistent XSS Vulnerability

No description provided by source. Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested...

BlogPHP v2 SQL Injection

Exploit for php platform in category web applications + Title : BlogPHP v2 SQL Injection + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Tested on : L:Vista & Windows Xp and Windows 7 + Dork ...

BlogPHP v2 Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/downloa...