CVE-2014-2611: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120...

PT-2014-4815

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41 Description The issue allows remote authenticated users to execute arbitrary code, obtain sensitive information, or delete data via unspecified vectors. Recommendations For versions 9.40 and...

Tccms V8 Sql Injection

简要描述： 过滤不严。 详细说明： 在app\controller\picture.class.php中 public function delete $this-userIsLogin ; $Obj = M$this-objName; $msgObj = new Msg; $id = $GET'id'; $idAry = $POST'id'; $idStr = count$idAry == 0 ? intval$id : implode",", $idAry; $newIdAry = explode",", $idStr; $idSize = count$newIdAry; if...

ThinkSAAS某处平衡权限

简要描述： ThinkSAAS某处平衡权限 详细说明： 能够越权审核数据，越权删除数据 //执行审核 case "do": $topicid = intval$GET'topicid'; $new'group'-update'grouptopic',array 'topicid'=$topicid, ,array 'isaudit'='0', ; //统计需要审核的帖子 $counttopicaudit = $new'group'-findCount'grouptopic',array 'groupid'=$groupid, 'isaudit'='1', ; // 统计小组下帖子数并更新...

CVE-2013-4183

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-4183

CVE-2013-4183 concerns OpenStack Cinder (LVMVolumeDriver) where the clear_volume routine used when deleting a snapshot does not properly clear data, potentially allowing local users to access sensitive information. The vulnerability affects OpenStack Cinder releases 2013.1.1 through 2013.1.2. Con...

CVE-2013-4183

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

Default credentials

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

PT-2013-3685

Name of the Vulnerable Software and Affected Versions HP StoreOnce D2D backup system versions prior to 3.0.0 Description The issue concerns a default password for the HPSupport account, which is set to badg3r5. This allows remote attackers to gain administrative access and potentially delete data...

CVE-2013-2342: Undefined Security Weakness

The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session...

Anonymous ransomware spotted in the wild, campaign to Infamous Activists group

Folks from abuse.ch spotted an interesting piece of ransomware malware currently circulating in the wild. Current release is infecting Windows users. It seems that Cybercrooks are taking advantage of Anonymous Banner, for conducting such malware campaigns and supposed to be another game by opposi...

CVE-2011-5090

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

CVE-2011-5090

GR Board (grboard) version 1.8.6.5 Community Edition exposes an unauthenticated ability to modify or delete data via specific endpoints: mod_rewrite.php, comment_write_ok.php, poll/index.php, update/index.php, trackback.php, or an arbitrary poll.php under theme/. The issue stems from missing auth...

CVE-2011-5090

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

CVE-2011-5090: Improper Authentication

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

Study Finds One in 10 Hand-Me-Down Hard Drives Still Hold Personal Data

A U.K. organization today released independent study results that show one in 10 secondhand hard drives sold online may contain “residential personal information,” such as bank statements, passports and medical details. In an effort to underscore the need to throughly scrub machines, mobile phone...

Traidnt Topics Viewer 2.0 - main.php Cross-Site Request Forgery

Traidnt Topics Viewer 2.0 - main.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/52224/info Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain...

Traidnt Topics Viewer 2.0 - 'main.php' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52224/info Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain...

Know who you're dealing with

The EFF has some advice for interacting with border agents. First: don’t lie to them. This is a punishable crime regardless of whether you are lying to cover something up or not. It is always better to decline answering than it is to give a false answer. Don’t obstruct an Agent’s investigation or...

EU Audit Forces Changes To Facebook Privacy Policies

An audit of Facebook’s operations by the Office of the Data Protection Commissioner in Ireland will result in major changes to the way the social networking giant manages user data. The 143 page report, issued on Wednesday, calls on Facebook to give users more control over how their personal...