SUSE-SU-2017:1151-1 Security update for apparmor

This update for apparmor provides the following fixes: This security issue was fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service bsc1029696 These non-security issues were fixed: - Add tunables/kernelvars abstraction. bsc1031529 - Update flags of ntpd profile...

[SECURITY] Fedora 25 Update: kf5-kio-5.31.0-2.fc25

KDE Frameworks 5 Tier 3 solution for filesystem abstraction...

[SECURITY] Fedora 25 Update: php-adodb-5.20.6-2.fc25

ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...

ADOdb vulnerable to cross-site scripting

Overview ADOdb is a database abstraction layer for PHP. The library's test script test.php contains a cross-site scripting CWE-79 vulnerability. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

HatDBG - Minimal WIN32 Debugger in Powershell

The HatDBG is A pure Powershell win32 debugging abstraction class. The goal of this project is to make a powershell debugger. It is intended to be used during internal penetration tests and red team engagements. This is exclusively for educational purposes. The debugger objects implementing a...

[SECURITY] Fedora 23 Update: kf5-kio-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 solution for filesystem abstraction...

[SECURITY] Fedora 23 Update: kf5-kpty-5.24.0-1.fc23

KDE Frameworks 5 tier 2 module providing Pty abstraction...

[SECURITY] Fedora 24 Update: kf5-knotifications-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 solution with abstraction for system notifications...

[SECURITY] Fedora 24 Update: kf5-kpty-5.24.0-1.fc24

KDE Frameworks 5 tier 2 module providing Pty abstraction...

[SECURITY] Fedora 23 Update: php-doctrine-orm-2.4.8-1.fc23

Object relational mapper ORM for PHP that sits on top of a powerful datab ase abstraction layer DBAL. One of its' key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctri ne Query Language DQL, inspired by Hibernate's HQL. This provides...

Hack Codegen - Facebook Open-Sources Code That Writes Code

Good news for Open Source Lovers! Facebook has open-sourced Hack Codegen – its library for automatically generating Hack code, allowing outside developers to automate some of their routine work while developing large programs. HACK is the Facebook's own programming language designed to build...

The Windows kernel attack-vulnerability warning-the black bar safety net

This article summarizes the current windows kernel attacks of various attack techniques. Describes and demonstrates some of the common bypass windows kernel protection method, and a reverse three describes how to pass kernel defects found in similar bypass method. By the kernel attack and memory...

Web Application Security Scanner Framework: Arachni

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of modern web applications. It is free, with its source code public and available for review. It is multi-platform, supporting all major operating...

Sql injection

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

PT-2014-5461 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions prior to 7.32 Description: The issue concerns the expandArguments function in the database abstraction API, which does not properly construct prepared statements. This allows remote attackers to conduct SQL injection...

Drupal Database Abstraction API SQLi

The remote web server is running a version of Drupal that is affected by a SQL injection vulnerability due to a flaw in the Drupal database abstraction API, which allows a remote attacker to use specially crafted requests that can result in arbitrary SQL execution. This may lead to privilege...

CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

CVE-2014-3704

Removed by vendor...

drupal7 -- SQL injection

Drupal Security Team reports: Drupal 7 includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks. A vulnerability in this API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution...