827 matches found
Support has ended for Office 2003
Support has ended for Office 2003 Last updated 2014-10-28Support for Office 2003 has ended. All of your Office 2003 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date...
'The Hacker News' Magazine - Relaunching New Editions
Dear Readers, After publishing 15 informative editions of 'The Hacker News' magazine in past 2 years; we at THN are again planning to relaunch the new Chapters of 'The Hacker News Magazine'. The Hacker News THN Monthly Magazine is the most comprehensive and informative collection of IT Security,...
WordPress Plugins Social Articles Remote File Upload Vulnerability
Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Plugins Social Articles Remote File Upload Vulnerability Author:...
Description of the cumulative update for Lync Server 2010, Mediation Server: November 2011
Describes the bugs that are fixed in the November, 2011 cumulative update package for Lync Server 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Lync Server 2010, Mediation Server that is dated November 2011.This article describes the following item...
Oracle Linux 5 : kernel (ELSA-2009-1455)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1455 advisory. - Revert: net atalk/irda: memory leak to user in getname Danny Feng 519309 519310 CVE-2009-3001 CVE-2009-3002 - net atalk/irda: memory leak to user in getname...
FreeBSD : otrs -- XSS vulnerability (661bd031-c37d-11e2-addb-60a44c524f57)
The OTRS Project reports : An attacker with permission to write changes, workorder items or FAQ articles could inject JavaScript code into the articles which would be executed by the browser of other users reading the article. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Joomla Jnews 8.0.1 Cross Site Scripting
Exploit Title: Joomla comjnews Open Flash-Chart XSS Release Date: 14/05/2013 Author: Deepankar Arora And Rafay Baloch Blog: http://rafayhackingarticles.net Vendor: www.joobi.co Versions Affected: 8.0.1latest and earlier Google Dork: inurl:comjnews Description: The vulnerability with Open-Flash...
otrs -- XSS vulnerability
The OTRS Project reports: An attacker with permission to write changes, workorder items or FAQ articles could inject JavaScript code into the articles which would be executed by the browser of other users reading the article...
Google Debuts New Help for Hacked Sites Videos, Articles
Search giant Google has posted a set of new informational videos and articles to help website owners recover their sites after they’ve been hacked. “Help for Hacked Sites” relies on knowledge from Google’s webmaster support members and software engineers to help end users determine whether their...
CVE-2012-4731
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
DEBIAN-CVE-2012-4731
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
CVE-2012-4731
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
Cross site request forgery (csrf)
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
CVE-2012-4731
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
CVE-2012-4731
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
CVE-2012-4731: Undefined Security Weakness
FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...
Debian DSA-2568-1 : rtfm - privilege escalation
It was discovered that RTFM, the FAQ manager for Request Tracker, allows authenticated users to create articles in any class. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2568. The text...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to the admins 2 blocks, 3 articles, or 4 suggest-category; or 5 sort parameter to the search page...
Nwahy Articles 2.2 - Cross-Site Request Forgery (Add Admin)
Exploit Title: Nwahy Articles V2.2 CSRF Add Admin Author: DaOne Date: 18-7-2012 Category: webapps Software Link: http://www.nwahy.com/upload/article-v2.2.rar Google dork: intext:"Powered by Nwahy Articles V2.2" Exploit...
Nwahy Articles 2.2 - Cross-Site Request Forgery (Add Admin)
Nwahy Articles 2.2 - Cross-Site Request Forgery Add Admin Exploit Title: Nwahy Articles V2.2 CSRF Add Admin Author: DaOne Date: 18-7-2012 Category: webapps Software Link: http://www.nwahy.com/upload/article-v2.2.rar Google dork: intext:"Powered by Nwahy Articles V2.2" Exploit...