openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0632-1)

Mozilla Firefox was updated to version 3.6.10, fixing various bugs and security issues. Following security issues were fixed: MFSA 2010-49 / CVE-2010-3169: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. So...

CMS WebManager-Pro SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection and Redirector URL Redirector Abuse vulnerabilities in CMS WebManager-Pro SecurityVulns ID:11108. It's Ukrainian commercial CMS. SQL Injection: http://site/c.php?id=1%20and%20version=5 Redirector:...

sudo is decorated with global decorator

The reasoning behind preventing theme developers from theming the admin areas was because if you don't know what you are doing then you can mess things up to such an extent that you are unable to use confluence. By decorating the sudo login pages using the global decorator it exposes the user to...

Gigya Socialize 1.1.8 For WordPress Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Gigya Socialize for WordPress. ----------------------------- Advisory: Vulnerabilities in Gigya Socialize for WordPress ----------------------------- URL: http://websecurity.com.ua/4153/ -----------------------------...

Google Ditching Windows Over Security Makes Little Sense

The Financial Times is reporting that Google is phasing out the internal use of Microsoft’s Windows operating system because of security concerns. The report, which is short on solid sourcing, quotes Google’s employees as saying the company is steering people towards using Apple’s Mac or the Linu...

Webiz - SQL Injection

Webiz - SQL Injection @@@@@@ @@ @@ @@@@@ @@@@@ @@ @@@@ @@ @@@@@@ @@@ @@@@ @@ @@ @@ @@ @@ @@ @@ @@ @ @@ @@ @@ @ @ @@ @ @@ @@@@@ @@ @@ @@@@@ @@ @@ @@ @@@@@ @@ @ @ @@ @@ @@ @@ @@ @@ @@ '' @@ @ @@ @@ @@ @ @ @@ @ @@ @@ @@ @@@@@ @@ @@ @@ @ @@ @@ @@ @@@ @@ @ [email protected] [email protected] VBHACKER.NET...

Liquid XML Studio LtXmlComHelp8.dll ActiveX OpenFile Buffer Overflow

Liquid Technologies develops and maintains an XML editor, Liquid XML Studio. Liquid XML is composed of an XML developers toolkit and IDE, enabling developers to design and develop XML Schema and applications. Bundled with the application is an ActiveX component that is registered on the system...

Digital Brand Web Brand Developers XSS Vulnerability

Exploit for php platform in category web applications ==================================================== Digital Brand Web Brand Developers XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

[SECURITY] Fedora 12 Update: kdesdk-4.4.2-1.fc12

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

Debian DSA-1910-1 : mysql-ocaml - missing escape function

It was discovered that mysql-ocaml, OCaml bindings for MySql, was missing a function to call mysqlrealescapestring. This is needed, because mysqlrealescapestring honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The adde...

SQL Injection Hits Social Net for Developers

A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. eWEEK Europe...

eBay to developers: Change your passwords

From IDG News Service Juan Carlos Perez Members of the eBay Developers Program must change their account passwords because the e-commerce company recently discovered a way in which account information could be accessed by malicious hackers. This requirement comes “out of an abundance of caution” ...

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706)

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution 969706 Published: July 28, 2009 Version: 1.0 General Information Executive Summary This security update addresses several privately reported vulnerabilities i...

SuSE Security Advisory SUSE-SA:2009:023 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:023. OpenVAS Vulnerability Test $Id: susesa2009023.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:023 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Update for rdesktop MDKA-2007:076 (rdesktop)

Check for the Version of rdesktop OpenVAS Vulnerability Test Mandriva Update for rdesktop MDKA-2007:076 rdesktop Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for kdesdk FEDORA-2007-2985

Check for the Version of kdesdk OpenVAS Vulnerability Test Fedora Update for kdesdk FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...

JVN#36802959 MyNETS cross-site scripting vulnerability

MyNETS from Usagi Project is an open source SNS Social Networking Service software. MyNETS contains a cross-site scripting vulnerability. Impact If a user views a specially crafted web page, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...

SecurityReason: PHP 5.2.6 SAPI php_getuid() overload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityReason.com : PHP 5.2.6 SAPI phpgetuid overload Author: Maksymilian Arciemowicz securityreason.com Date: - - Written: 20.11.2008 - - Public: 05.12.2008 SecurityReason Research SecurityAlert Id: 59 SecurityRisk: High Affected Software: PHP 5.2.6...

php5 -- potential magic_quotes_gpc vulnerability

PHP Developers reports: Due to a security bug found in the PHP 5.2.7 release, it has been removed from distribution. The bug affects configurations where magicquotesgpc is enabled, because it remains off even when set to on...