1896 matches found
Support web sudo and other password confirmation features with custom authenticators
By default, web sudo and other password confirmation features in Confluence 3.5 and later are disabled if a custom authenticator is detected. However, there is an override flag that was added as part of CONF-20958 that allows administrators to turn it on again. If it is turned on manually, in mos...
Support web sudo and other password confirmation features with custom authenticators
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-22875. panel By default, web sudo and other password confirmation features in Confluence 3.5 and later are disabled if a custom...
Yourtube Database Download
| Exploit Title : Yourtube Sql table download vuln | Auther : Eg-R1z | Home : black-hat.cc , sec4ever.com | contact : Get me @ the above sites i-Hmx - - - - - - - - - - - - - - - - - - - - - - - - - - -...
Debian DSA-2187-1 : icedove - several vulnerabilities
Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsin...
Android App Makers Should be Held Accountable
Google’s response to the recent discovery of malicious apps in the Android market place is proof that we’re now entering a new phase in malware mitigation. Can you imagine Microsoft automatically pushing an executable to part of its user-base with no opt-out option? This essay is not about the...
Mailman: Three XSS flaws due improper escaping of the full name of the member
Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...
CVE-2011-0707
Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...
Angel Learning Management System 7.3 - pdaview.asp Cross-Site Scripting
Angel Learning Management System 7.3 - pdaview.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/44689/info Angel Learning Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage th...
Confluence features that require password confirmation (websudo, captcha) do not work with custom authentication
When user is required to confirm the password, Confluence always checks the entered password against the internally stored user/password. If an instance is configured to use custom authentication which is different from atlassian-user, the password validation will fail. h3. Resolution This is fix...
Confluence features that require password confirmation (websudo, captcha) do not work with custom authentication
When user is required to confirm the password, Confluence always checks the entered password against the internally stored user/password. If an instance is configured to use custom authentication which is different from atlassian-user, the password validation will fail. h3. Resolution This is fix...
Confluence features that require password confirmation (websudo, captcha) do not work with custom authentication
When user is required to confirm the password, Confluence always checks the entered password against the internally stored user/password. If an instance is configured to use custom authentication which is different from atlassian-user, the password validation will fail. h3. Resolution This is fix...
osDate - uploadvideos.php Arbitrary File Upload
osDate - uploadvideos.php Arbitrary File Upload ==================================================== osDate Upload Shell Vulnerability uploadvideos.php ==================================================== Date : 05/08/2010 Author : Xa7m3d Tested ON : ubuntu 9.10 MY Team : Currently no Software Li...
Booking System for Planyo Multiple VUlnerabilty
Exploit for php platform in category web applications =============================================== Booking System for Planyo Multiple VUlnerabilty =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...
lftp file overwrite
Downloaded file name in lftpget may be set by server without user confirmation...
CVE-2010-2714
creationtimestamp| type| source ---|---|--- 2010-07-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14203...
TornadoStore 1.4.3 SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================== TornadoStore 1.4.3 SQL Injection Vulnerability ============================================== 1. Advisory Information Title: Multiple SQL Injection in TornadoStore 1.4.3 Advisory ID:...
Users can be tricked into uploading unexpected files
Plug-ins may be used to seed the system clipboard with paths to a target file, while the user may not expect that to be the contents of the clipboard. If the user can be convinced to focus a file input and paste the contents of the clipboard, the file can then be immediately uploaded without...
Users can be tricked into uploading unexpected files – Opera Security Advisories
Users can be tricked into uploading unexpected files – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Less severe Description Plug-ins may be used to seed the system clipboard with paths to a target file, while the user may not expect that to be the contents of the clipboard. If th...