Moderate: Red Hat Security Advisory: postfix security update

Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RedHat Update for postfix RHSA-2011:0422-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Moderate: Red Hat Security Advisory: postfix security update

Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: postfix security update

Updated postfix packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Wireshark 6LoWPAN denial of service vulnerability

Overview Wireshark will crash on 32-bit systems while reading a malformed 6LoWPAN packet. Description Paul Makowski's report states:dissect6lowpaniphcin /epan/dissectors/packet-6lowpan.c trusts user supplied data when incrementing 'offset '. It is possible for the user to increment 'offset ' to a...

MODx Evo 1.0.4 (and prior) SQL Injection and Directory Traversal Vulnerabities

Status: Solved Product: MODx Evolution Severity: High Versions: 1.0.4 and prior Advisory Date: 2011-01-26 Fixed Date: 2011-01-19 Impact: a A remote attacker may access or view arbitrary files on the server. b A remote attacker may execute arbitrary PHP code as a result of SQL injection. Descripti...

Fedora Update for maniadrive-data FEDORA-2011-0329

Check for the Version of maniadrive-data OpenVAS Vulnerability Test Fedora Update for maniadrive-data FEDORA-2011-0329 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

[SECURITY] Fedora 13 Update: maniadrive-data-1.2-5.fc13

Data files for maniadrive, a 3D stunt driving game. Notice this package does not include the original ManiaDrive soundtrack as the original soundtrack is licensed under a CC BY-NC-SA license, which is not acceptable to Fedora. A replacement soundtrack is available in the maniadrive-music package...

Pointter PHP Micro-Blogging Social Network 1.8 Privilege Escalation

'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Network' authentication system which allo...

icblogger full-(tr) (mail.mdb) Database Disclosure Exploit

!/usr/bin/perl -w icblogger full-tr mail.mdb Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

Multiple SSH Vulnerabilities - Cisco Systems

Four different Cisco product lines are susceptible to multiple vulnerabilities discovered in the Secure Shell SSH protocol version 1.5. These issues have been addressed, and fixes have been integrated into the Cisco products that support this protocol. By exploiting the weakness in the SSH...

Microsoft Shifts to 'Coordinated Vulnerability Disclosure' Policy

Microsoft is changing the way in which it handles vulnerability disclosures, now moving to a model it calls coordinated vulnerability disclosure, in which the researcher and the vendor work together to verify a vulnerability and allow ample time for a patch. However, the new philosophy also...

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

Overview The Symantec AppStream and Workspace Streaming clients fail to properly validate downloads, which can allow a remote, unauthenticated attacker to download and execute arbitrary code on a vulnerable system. Description Symantec Workspace Streaming is a software distribution solution that...

barnowl buffer overflow

Buffer overflow on CC: handling...

WordPress Plugin TinyBrowser - Arbitrary File Upload

TinyBrowser Remote File upload Vulnerability Prodcut: TinyBrowser Home : www.dz4all.com/cc Vunlerability : Remote File upload Risk : High Dork : inurl:"tinybrowser.php?" Discovred by: Ra3cH From : Algeria Contact : [email protected] Exploit: http://PATH/tinybrowser/upload.php?type= Exemple:...

big.asp - SQL Injection

Author : Ra3cH Price : N/A Title : big.asp SQL Injection Vulnerability Site : www.dz4all.com/cc Dork : inurl:enq/big.asp?id= Risk : High Vulnerable script: enq/big.asp?id= SQL-injection --------------------------------------------------------- http://server/path/enq/big.asp?id= SQL Inject Exploit...

big.asp - SQL Injection

big.asp - SQL Injection Author : Ra3cH Price : N/A Title : big.asp SQL Injection Vulnerability Site : www.dz4all.com/cc Dork : inurl:enq/big.asp?id= Risk : High Vulnerable script: enq/big.asp?id= SQL-injection ---------------------------------------------------------...

Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability

Exploit for php platform in category web applications ================================================================= Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability ================================================================= + Site : www.v4-team.com/cc and...

Powered by iNetScripts - Arbitrary File Upload

==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploit http://localhost/imagehost/ Dork...

Mail support request accepts any e-mail address

The SupportUtility allows the user to enter an arbitrary e-mail address to send a copy of the e-mail to. This issue removes the option for users to enter an e-mail address to CC. This issue also introduces a flag that prevents the TO address from being changed through the web interface. By defaul...