1109 matches found
[SECURITY] Fedora 13 Update: tor-0.2.1.28-1300.fc13
Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...
Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
This host is running Moodle and is prone to Cross-Site Scripting and Cross Site Request Forgery Vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlexssncsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors: Madhuri...
perl-Archive-Tar security update
1.39.1-1.el5.1 - cleaning spec and nvr - Related: rhbz595733 1.40-1.el5.1 - update to real version 1.3901, but for rpm updates, it will be 1.40 - Resolves: rhbz595733 1.40-1 - update to 1.40 - Resolves: rhbz595733...
DEBIAN-CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...
CVE-2010-2230
CVE-2010-2230 (Moodle) affects the Moodle web app’s KSES HTML text cleaning library (lib/weblib.php). The root cause is the KSES filter failing to properly handle vbscript URIs, allowing remote authenticated users to inject arbitrary HTML/script via HTML input (XSS). Affected are Moodle 1.8.13- a...
Moodle < 1.8.13 / 1.9.x < 1.9.9 Multiple Vulnerabilities
Binary data 5575.prm...
[SECURITY] Fedora 13 Update: kdeutils-4.4.3-1.fc13.1
Utilities for KDE 4. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task scheduler kwalletmanager: kde wallet management...
[SECURITY] Fedora 12 Update: kdeutils-4.4.3-1.fc12.1
Utilities for KDE 4. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task scheduler kwalletmanager: kde wallet management...
CVE-2010-1619
Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...
CVE-2010-1619
CVE-2010-1619 affects Moodle’s KSES HTML text cleaning library (weblib.php) via the fix_non_standard_entities function. The vulnerability allows remote XSS by crafting HTML entities and is reported in Moodle 1.8.x prior to 1.8.12 and 1.9.x prior to 1.9.8. Related advisories describe multiple link...
CVE-2010-1619
Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...
CVE-2010-1619
Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...
CVE-2010-1619: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...
How to identify and clean Conficker infections
As the world prepares for the complete destruction of the Internet tomorrow when the Conficker worm makes a small change in its communication protocol, a voice of reason has emerged from the wilderness. The Honeynet Project on Monday released a paper with a detailed analysis of the worm as well a...
FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit
!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...
freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit
Exploit for unknown platform in category remote exploits ====================================================== freeSSHd 1.2.1 Post Auth Remote SEH Overflow Exploit ====================================================== !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow...
freeSSHd 1.2.1 - (Authenticated) Remote Overflow (SEH)
freeSSHd 1.2.1 - Authenticated Remote Overflow SEH !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com...