7756 matches found
How easy it is to hack AMC's sites !
An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...
Update Protection against Novell iManager getMultiPartParameters Unauthorized File Upload
A vulnerability was reported in Novell iManager, a web-based administration console that provides management of many other Novell products. The vulnerability is due to insufficient validation of the getMultiPartParametersfunction. A remote attacker could leverage this vulnerability to upload...
Federal Officials Call For Better Privacy, Security Protections Online
SAN FRANCISCO–The Obama administration’s top information security officials hit the stage at the RSA Conference Tuesday, looking to drum up support for several of the president’s key security and privacy initiatives, including a still-nebulous plan for protecting users’ freedom and privacy on the...
DSA-2167-1 phpmyadmin - sql injection
Bulletin has no description...
Finally U.S. Policy to Address Internet Freedom !
Days after Facebook and Twitter added fuel to a revolt in Egypt, the Obama administration plans to announce a new policy on Internet freedom, designed to help people get around barriers in cyberspace while making it harder for autocratic governments to use the same technology to repress dissent...
R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities
R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities February 7, 2011 -- Vulnerability Details: The Accellion File Transfer Appliance, prior to version FTA80562, suffers from a number of security flaws that can lead to a remote root compromise. 1. Message Routing Daemon Default...
Chinese hackers penetrate multinational oil giants !
Hackers in China are causing havoc among computer systems of five multinational oil and gas companies, according to a new report by McAfee. Security outfits have warned that this type of attack could get lot worse as multinationals continue to prod the Chinese government. McAfee said in its Night...
Linksys WAP610N - Root Access Security
Secure Network - Security Research Advisory Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL: http://www.linksysbycisco.com Authors: Matteo Ignaccolo...
TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)
Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways SMCD3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product:...
IBM Db2 Administration Server (DAS) Buffer Overflow Vulnerability
IBM Db2 is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
CVE-2010-3854
Multiple cross-site scripting XSS vulnerabilities in the web administration interface aka Futon in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the web administration interface aka Futon in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3854
Multiple cross-site scripting XSS vulnerabilities in the web administration interface aka Futon in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-3854
CVE-2010-3854 affects Apache CouchDB Futon (web admin) from versions 0.8.0 through 1.0.1, where multiple XSS vulnerabilities permit remote script/HTML injection via unspecified vectors. Core issue: improper input handling in Futon. Impact is remote script execution in the admin interface context....
CVE-2010-3854
Multiple cross-site scripting XSS vulnerabilities in the web administration interface aka Futon in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
plone -- Remote Security Bypass
Plone developer reports: This is an escalation of privileges attack that can be used by anonymous users to gain access to a Plone site's administration controls, view unpublished content, create new content and modify a site's skin. The sandbox protecting access to the underlying system is still ...
CVE-2011-0731
Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...
Buffer overflow
Buffer overflow in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors...
Micro Focus Enterprise Administration Server Authentication Check
The administration interface for the remote Micro Focus Enterprise Server is accessible without authentication. A remote attacker is able to access potentially sensitive information and modify any settings available through this administration interface. %NASLMINLEVEL 70300 C Tenable Network...
Micro Focus Enterprise Administration Server Detection
The remote web server is a Micro Focus Enterprise Administration Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51838; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Micro Focus Enterprise Administration Server Detection";...