Joomla Component (com_restaurantguide) Multiple Vulnerabilities

No description provided by source. Exploit Title: Joomla Component comrestaurantguide Multiple Vulnerabilities Date: 18.09.2010 Author: Valentin Category: webapps/0day Version: 1.0.0 Tested on: Debian lenny, Apache2, MySQL 5, Joomla 1.5.x CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Madness Pro <= 1.14 - Persistent XSS

No description provided by source. !/usr/bin/env python2 -- coding: utf-8 -- Exploit Title: Madness Pro %3C%2Fscript%3E%3C%2Fa%3E" "%3Ca%20href%3D%22%23%22%20onclick%3D%5C%22setstatus\'12345".formatpanelindexurl, beefhookurl print f.read installbeefhookbeefhook, panelurl...

MTP Image Gallery 1.0 (edit_photos.php, title param) - XSS Vulnerability

No description provided by source. ?!-- MTP Image Gallery 1.0 title Remote Script Insertion Vulnerability Vendor: MTP Scripts Product web page: http://www.morephp.net Affected version: 1.0 Summary: MTP Image Gallery offers more control, better uploading and enhanced performance. With MTP Image...

FleaHttpd Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python FleaHttpd Remote Denial Of Service Exploit by condis FleaHttpd is a http daemon written from scratch in C. When working as a static file server, data show that under certain condition, fleahttpd's speed for static file retrieving can be three...

openSUSE Security Update : php5 (openSUSE-SU-2014:0841-1)

php5 was updated to prevent insecure DNS TXT record parsing. This security issue was fixed : - Heap-based buffer overflow in DNS TXT record parsing CVE-2014-4049 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

openSUSE Security Update : apache2-mod_wsgi (openSUSE-SU-2014:0782-1)

apache2-modwsgi was updated to fix two security issues. These security issues were fixed : - Information exposure CVE-2014-0242 - Local privilege escalation CVE-2014-0240 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

openSUSE Security Update : apache2-201202 (openSUSE-SU-2012:0314-1)

This update of apache2 fixes regressions and several security problems : bnc728876, fix graceful reload bnc741243, CVE-2012-0031: Fixed a scoreboard corruption shared mem segment by child causes crash of privileged parent invalid free during shutdown. bnc743743, CVE-2012-0053: Fixed an issue in...

openSUSE Security Update : apache2 (openSUSE-2012-132)

httpd-2.2.x-bnc743743-CVE-2012-0053-serverprotocolc-cookieexposure.diff addresses CVE-2012-0053: error responses can expose cookies when no custom 400 error code ErrorDocument is configured. bnc743743 - httpd-2.2.x-bnc741243-CVE-2012-0031-scoreboardhandling.diff: scoreboard corruption shared mem...

openSUSE Security Update : apache2 (openSUSE-SU-2011:0859-1)

This update fixes : - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS memory leak in APR's reqtimeoutfilter function %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2013:1609-1)

the following security issue was fixed in apache2-modfcgid : - fixes a heap overflow identified by CVE-2013-4365 bnc844935. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-808. T...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:1138-1)

The blowfish password hashing implementation did not properly handle 8-characters in passwords, which made it easier for attackers to crack the hash CVE-2011-2483. After this update existing hashes with id '$2a$' for passwords that contain 8-bit characters will no longer be compatible with newly...

openSUSE Security Update : apache2-mod_nss (openSUSE-SU-2013:1956-1)

modnss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566: If 'NSSVerifyClient none' is set in the server / vhost context i.e. when server is configured to not request or require client certificate authentication on the initial connection, and client certificate authentication is expected to...

openSUSE Security Update : viewvc (openSUSE-SU-2012:0831-1)

update to 1.1.15 bnc768680 : - security fix: complete authz support for remote SVN views CVE-2012-3356 - security fix: log msg leak in SVN revision view with unreadable copy source CVE-2012-3357 Additionally the following non-security issues have been addressed : - fix several instances of...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)

PHP was updated to version 5.3.3 to fix serveral security issues. CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,...

openSUSE Security Update : apache2 (openSUSE-SU-2013:1340-1)

httpd-2.2.x-bnc829056-CVE-2013-1896-pr1482522-moddav.diff CVE-2013-1896: Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault. bnc829056 -...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:1012-1)

Insufficient handling of certain character sequences in the utf8decode function could be leveraged to conduct cross-site-scripting XSS attacks CVE-2010-3870. php5 could also consume large amounts of memory and crash if a long mail address was passed to filtervar with parmeter FILTERVALIDATEEMAIL...

openSUSE Security Update : apache2-mod_fcgid (openSUSE-SU-2011:0884-1)

A possible stack overflow in apache2-modfcgid due to wrong pointer arithmetic has been fixed. CVE-2010-3872 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : apache2-mod_security2 (openSUSE-SU-2013:1331-1)

complete overhaul of this package, with update to 2.7.5. - ruleset update to 2.2.8-0-g0f07cbb. - new configuration framework private to modsecurity2: /etc/apache2/conf.d/modsecurity2.conf loads /usr/share/apache2-modsecurity2/rules/modsecuritycrs1 0setup.conf, then...

openSUSE Security Update : apache2 (openSUSE-SU-2013:0243-1)

ignore case when checking against SNI server names. bnc798733 httpd-2.2.x-bnc798733-SNIignorecase.diff - better cleanup of busy count after recovering from failure bnc789828 httpd-2.2.x-bnc789828-modbalancer.diff - httpd-2.2.x-bnc788121-CVE-2012-4557-modproxyajptimeout.diff: backend timeouts...

openSUSE Security Update : apache2 (openSUSE-SU-2013:0245-1)

httpd-2.2.x-bnc798733-SNIignorecase.diff: ignore case when checking against SNI server names. bnc798733 - httpd-2.2.x-bnc777260-CVE-2012-2687-modnegotiationfilenamexss.diff Escape filename for the case that uploads are allowed with untrusted user's control over filenames and modnegotiation...