As a developer or release manager I want to be able to create and manage versions in JIRA without having to be given project admin permissions

Currently JIRA only allows a user to create, release and generally manage versions in a project if the user is a project admin. However there are numerous use cases where developers, release managers, project managers, etc. need to be able to perform this function but don't need full admin rights...

[SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability

CVE-2010-3449: Apache Continuum CSRF vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Continuum 1.3.6 Continuum 1.4.0 Beta The unsupported versions Continuum 1.1 - 1.2.3.1 are also affected. Description: Administrators are able to change any user's...

Albania Security Group Hack more than 1000 Facebook Pages In One day !

Albania Security Group Hack more than 1000 Facebook Pages In One day ! There are Four Admins In the Group : 1. Hacker Twilight 2. Akrepi Hacker 3. BombRun 4. WarBot They Spread a Hex Javascript on Facebook, Once Victim will run that ,it automatically add there email id as admin in all victims...

LifeType 1.2.10 - HTTP Referer Persistent Cross-Site Scripting

Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results in a cross site scripting attack against admins or an...

LifeType 1.2.10 - HTTP Referer Persistent Cross-Site Scripting

LifeType 1.2.10 - HTTP Referer Persistent Cross-Site Scripting Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.ph...

Samyak Tejawat found vulnerability in this Italian government site !

Samyak Tejawat 13 year old found vulnerability in this Italian government site ! Whole database can be extracted. Mr. Samyak Tejawat inform the admins of site about this venerability, Hope it will be fixed soon : SQLi vuln. link =...

Admin menu items displayed to non-admins when accessing "Global Templates" page

When accessing the "Global Templates" menu as a non-admin, the navigation controls for the administration panel are displayed. The links cannot be used without entering new credentials, but it would be more consistent to hide the links from non-admins, just as we hide "System Administrator" links...

Admin menu items displayed to non-admins when accessing "Global Templates" page

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-21562. panel When accessing the "Global Templates" menu as a non-admin, the navigation controls for the administration panel are...

STUXNET Scanner to Identify Stuxnet Infected Machines !

TrendLabs has created a STUXNET Scanner Tool to help administrators with clues to determine which computers in their networks are still infected by STUXNET. This tool helps administrators identify infected machines within their own networks even if STUXNET is not communicating as STUXNET installs...

Design/Logic Flaw

/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...

VWD-CMS - Cross-Site Request Forgery

VWD-CMS - Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Wellcome to My...

Month Of Abysssec Undisclosed Bugs - Eshtery CMS

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub12-eshtery-cms-sql-injection-vulnerability/ ''' Abysssec Inc Public Advisory Title : eshtery CMS Sql Injection Vulnerability Affected Version :...

eshtery CMS - SQL Injection

eshtery CMS - SQL Injection ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub12-eshtery-cms-sql-injection-vulnerability/ ''' Abysssec Inc Public Advisory Title : eshtery CMS Sql Injection...

eshtery CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================= eshtery CMS SQL Injection Vulnerability ======================================= Title : eshtery CMS Sql Injection Vulnerability Affected Version : eshtery copyrights 2003-2004 Discovery : www.abysssec.co...

DEBIAN-CVE-2010-1645

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

Microsoft Ships Anti-Exploit Tool for IT Admins

LAS VEGAS — Microsoft today released a new tool to help IT administrators backport anti-exploit mitigations like ASLR Address Space Layout Randomization and DEP Data Execution Prevention to older versions of Windows. The tool, called Enhanced Mitigation Experience Toolkit EMET works by applying...

PTCPay GEN4 - 'buyupg.php' SQL Injection

===================================================== PTCPay GEN4 buyupg.php SQL Injection Vulnerability ===================================================== Exploit Title: Date: 28.06.2010 Author: Dark.Man [email protected] Thanks To: Diq3N , SkyTurk , ByHuCRe , HeuRiSTiC , th3spy , 3KStyL3 ...

CVE-2010-1984

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the taxonomy term name in a Breadcrumb display...

CVE-2010-1976

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the node title in a Breadcrumb display...

Viennabux Beta Forum <= SQL injection Vulnerability & Injection Exploit

Exploit for php platform in category web applications ======================================================================= Viennabux Beta Forum = SQL injection Vulnerability & Injection Exploit =======================================================================...