EUVD-2008-0852

Malware in sbrugna...

LDAP Login Scanner

This module attempts to login to the LDAP service. Module Options msf use auxiliary/scanner/ldap/ldaplogin msf auxiliaryldaplogin show actions ...actions... msf auxiliaryldaplogin set ACTION msf auxiliaryldaplogin show options ...show and set options... msf auxiliaryldaplogin run This module...

Why is .US Being Used to Phish So Many of Us?

Domain names ending in ".US" -- the top-level domain for the United States -- are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen by the U.S. government, which is frequently the target of phishing domains ending in .US. Also, .US domains...

Kerberos ticket converter

This module converts tickets to the ccache format from the kirbi format and vice versa. Module Options msf use auxiliary/admin/kerberos/ticketconverter msf auxiliaryticketconverter show actions ...actions... msf auxiliaryticketconverter set ACTION msf auxiliaryticketconverter show options ...show...

campbell-dean.com Cross Site Scripting vulnerability OBB-2929194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-38135

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin = 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings...

Improper access control

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin = 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings...

CVE-2022-38135

CVE-2022-38135 concerns Dean Oakley’s Photospace Gallery WordPress plugin, affected up to version 2.3.5. The flaw is a Broken Access Control where users with a subscriber or higher role can change plugin settings, indicating missing authorization checks on settings updates. Affected: Photospace G...

campbell-dean.com Cross Site Scripting vulnerability OBB-2652180

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-3479-1: PostgreSQL vulnerabilities

David Rowley discovered that PostgreSQL incorrectly handled memory when processing certain JSON functions. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2017-15098 Dean Rasheed discovered that PostgreSQL incorrectly enforced SELECT privileges when processing...

LulzSec exposed details of alleged snitches

LulzSec exposed details of alleged snitches In a Pastebin post, LulzSec explained that the two hackers allegedly tried to "snitch on them", and so LulzSec took revenge. LulzSec boasted to the FBI "& other law enforcement clowns", saying: "we just did your job for you with great ease". The first...

LulzSec exposed details of alleged snitches

LulzSec exposed details of alleged snitches In a Pastebin post, LulzSec explained that the two hackers allegedly tried to "snitch on them", and so LulzSec took revenge. LulzSec boasted to the FBI "& other law enforcement clowns", saying: "we just did your job for you with great ease". The first...

Microsoft Unveils Enhanced Security Features for Internet Explorer 9

Microsoft has detailed new security features for Internet Explorer 9 IE9 that will help users prevent sites from tracking their activity across browsing sessions. The new feature, set to launch with the first release candidate of IE9 early next year, uses a list to control which third-party...

Ubuntu Update for geoip vulnerability USN-412-1

Ubuntu Update for Linux kernel vulnerabilities USN-412-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4121.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for geoip vulnerability USN-412-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...

CVE-2008-0845

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...

CVE-2008-0845

The CVE-2008-0845 entry concerns the WordPress WP-People plugin (version 1.6.1) vulnerability in wp-people-popup.php where the person parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is improper handling of user input in the wp-peo...

Unfixed XSS vulnerability at lapdonline.org

Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting lapdonline.org, which at the time of submission ranked 155840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is currently...

Unfixed XSS vulnerability at www.unitedkingdom.co.uk

Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.unitedkingdom.co.uk, which at the time of submission ranked 656799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...