$_GET not cleaned when parsed from REQUEST_URI

When none of the default methods of determining the request URI have succeeded, the framework will fallback to parsing the raw request URI as passed by the webserver. If this URI has a query string, it will be parsed and $GET will be updated. In this process, the $GET variables are not cleaned,...

Talking about my company for security emergency response-vulnerability warning-the black bar safety net

0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...

[SECURITY] Fedora 17 Update: sweeper-4.10.4-1.fc17

Sweeper helps to clean unwanted traces the user leaves on the system...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

[SECURITY] Fedora 14 Update: tor-0.2.1.29-1400.fc14

Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...

Concave Yaya 4. 7 and following versions through the kill EXP-vulnerability warning-the black bar safety net

Description: 0. google : inurl:/otype. asp? classid= 1. Type the destination Station, no accident words will you wait a while,because you want to and other script timeout error,is recommended to drink tea. 2. Then the address bar type the following code, The JavaScript hijack it. 3. Refresh once,...

[SECURITY] Fedora 13 Update: tor-0.2.1.28-1300.fc13

Tor is a connection-based low-latency anonymous communication system. Applications connect to the local Tor proxy using the SOCKS protocol. The local proxy chooses a path through a set of relays, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the...

Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities

This host is running Moodle and is prone to Cross-Site Scripting and Cross Site Request Forgery Vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlexssncsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors: Madhuri...

perl-Archive-Tar security update

1.39.1-1.el5.1 - cleaning spec and nvr - Related: rhbz595733 1.40-1.el5.1 - update to real version 1.3901, but for rpm updates, it will be 1.40 - Resolves: rhbz595733 1.40-1 - update to 1.40 - Resolves: rhbz595733...

DEBIAN-CVE-2010-2230

The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...

CVE-2010-2230

The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...

CVE-2010-2230

The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting XSS attacks via HTML input...

CVE-2010-2230

CVE-2010-2230 (Moodle) affects the Moodle web app’s KSES HTML text cleaning library (lib/weblib.php). The root cause is the KSES filter failing to properly handle vbscript URIs, allowing remote authenticated users to inject arbitrary HTML/script via HTML input (XSS). Affected are Moodle 1.8.13- a...

Moodle < 1.8.13 / 1.9.x < 1.9.9 Multiple Vulnerabilities

Binary data 5575.prm...

[SECURITY] Fedora 13 Update: kdeutils-4.4.3-1.fc13.1

Utilities for KDE 4. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task scheduler kwalletmanager: kde wallet management...

[SECURITY] Fedora 12 Update: kdeutils-4.4.3-1.fc12.1

Utilities for KDE 4. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task scheduler kwalletmanager: kde wallet management...

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...

CVE-2010-1619

CVE-2010-1619 affects Moodle’s KSES HTML text cleaning library (weblib.php) via the fix_non_standard_entities function. The vulnerability allows remote XSS by crafting HTML entities and is reported in Moodle 1.8.x prior to 1.8.12 and 1.9.x prior to 1.9.8. Related advisories describe multiple link...

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...