Vulnerability in core server (CVE-2013-1901)

An unprivileged user can run commands that could interfere with in-progress backups...

[SECURITY] [DSA 2658-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2658-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 04, 2013 http://www.debian.org/security/faq -...

DSA-2658-1 postgresql-9.1 - several

Bulletin has no description...

Debian Security Advisory DSA 2658-1 (postgresql-9.1 - several vulnerabilities)

Several vulnerabilities were discovered in PostgreSQL database server. CVE-2013-1899Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center discovered that it was possible for a connection request containing a database name that begins with - to be crafted that can damage or...

PostgreSQL -- anonymous remote access data corruption vulnerability

PostgreSQL project reports: The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. Al...

Fedora 17 : mediawiki-1.19.4-2.fc17 (2013-3227)

Bring mediawiki up to date to fix multiple bugs, security holes, and bring new features. The package should automatically attempt to upgrade your wiki, but please make sure to perform backups before updating. Special care may be required for MySQL based wikis. See bug 845818. Read the main...

PrestaShop E-Commerce v1.5.x->1.5.2 Multiple Vulnerabilities

This is new Multiple Vulnerabilities POC/Bugs in PrestaShop E-Commerce 1.5.x-1.5.2 The Attacker can use this bug to access and get some important information like backups/dbs, and maybe he can find some secret information like visa/paypal accounts in the backups etc... This is private exploit. Yo...

Design/Logic Flaw

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as...

Windows Flamer / Skywiper Malware Detection

Using the supplied credentials, Nessus has found evidence that the remote Windows host has been compromised by malware known as Flamer and Skywiper. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59318; scriptversion"1.6";...

CVE-2012-2905

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

Improper access control

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2012-2905

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2012-2905

CVE-2012-2905 affects Artiphp CMS 5.5.0 Neo (r422), where database backups are stored with predictable names under the web root due to insufficient access control. This information exposure enables remote attackers to obtain sensitive data via direct requests. The primary impact is confidential d...

ManageEngine SupportCenter Plus < 7.9 Build 7905 Multiple Vulnerabilities

The remote host is running a version of ManageEngine SupportCenter Plus less than 7.9 build 7905. Such versions are affected by multiple vulnerabilities: - A SQL injection vulnerability in the 'countSql' parameter of the '/servlet/AJaxServlet' script. - Multiple stored cross-site scripting...

http-config-backup NSE Script

Checks for backups and swap files of common content management system and web server configuration files. When web server files are edited in place, the text editor can leave backup or swap files in a place where the web server can serve them. The script checks for these files: wp-config.php:...

CVE-2011-3462

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803...

Design/Logic Flaw

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803...

Backups Pane Object Not Found

Challenge You receive an error stating "Object 'GUID' was not found when going into the Backups Pane. Cause The object it is looking for is no longer in the database and the backups that are causing the error needs to be removed from the database. Solution Run the following powershell script by...

FreeBSD : nwclient -- multiple vulnerabilities (d177d9f9-e317-11d9-8088-00123f0f7307)

Insecure file permissions, network access control and DNS usage put systems that use Legato NetWorker at risk. When the software is running, several files that contain sensitive information are created with insecure permissions. The information exposed include passwords and can therefore be used...

Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security

Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security A Russian security company has upgraded a phone-password cracking suite with the ability to figure out the master device password for Research in Motion's BlackBerry devices. Elcomsoft said that before it developed the...