Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Batch Jobs Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site request forgery vulnerabilities exist in the Drupal Batch Jobs module, which can be exploited by an attacker to perform certain unauthorized actions and gain access to affected applications...

SA-CONTRIB-2015-008 - Batch Jobs - Cross Site Request Forgery (CSRF)

The Batch Jobs project is a scalable way to execute a list of tasks. Links that take actions on batch jobs are not protected from Cross Site Request Forgery CSRF. A malicious individual could cause a user that has permission to access a particular batch job or an administrator to delete the recor...

CVE-2014-5208

CVE-2014-5208 affects Yokogawa BKBCopyD.exe in Batch Management Packages on CENTUM CS 3000 (R3.09.50 and earlier), CENTUM VP (R4.03.00 and R5.x up to R5.04.00), and Exaopc (R3.72.10). The vulnerability allows unauthenticated remote access to read arbitrary files via RETR, write arbitrary files vi...

CVE-2012-5500

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

Cross site request forgery (csrf)

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

PYSEC-2014-42

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

PYSEC-2014-42

The batch id change script renameObjectsByPaths.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request...

CVE-2012-5500

CVE-2012-5500 affects Plone’s batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1. Root cause: CSRF token-based request path allows a remote attacker to change the titles of content items. Impact stated: unauthorized modification of content item titles. Ex...

[SECURITY] [DSA 3058-1] torque security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

Windows batch parsing vulnerability-vulnerability warning-the black bar safety net

In this article before you begin, Please note that this is a very jumbled information security notices. Related to Windows control command identifier, I may have found a simple batch file to attack the BUG. This BUG is present in Windows 2 0 0 0 version more 6 4-bit and 3 2-bit machine, it is a...

Debian DSA-3058-1 : torque - security update

Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tmadopt library call to kill any process, including root-owned ones on any node in a job. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DLA 78-1] torque security update

Package : torque Version : 2.4.8+dfsg-9squeeze5 CVE ID : CVE-2014-3684 Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tmadopt library call to kill any process, including root-owned ones on any node in a...

[SECURITY] [DSA 3058-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3058-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

DSA-3058-1 torque - security update

Bulletin has no description...

[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

Discuz！旗下产品统一存在一个csrf+sql批量执行风险（dz3.x,dz7.x,SupeSite7.x等等）

简要描述： Discuz！旗下产品统一存在一个sql批量执行风险（dz3.x,dz7.x,SupeSite7.x等等） 详细说明： 今天看dz的SupeSite7.x产品的时候，发现一个dz统一存在的脱裤风险： 直接看代码，我们在做数据库还原的时候，抓到一个链接：...

[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

CVE-2014-6645

The Batch library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6645

CVE-2014-6645 affects the Batch library for Android, where the SSL/TLS layer does not verify X.509 certificates from servers. This enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Documented details come from NVD/NVD-relat...