Fedora 19 : mediawiki-1.21.6-1.fc19 (2014-3344)

bug 60771 SECURITY: Disallow uploading SVG files using non-whitelisted namespaces. Also disallow iframe elements. User will get an error including the namespace name if they use a non-whitelisted namespace. - bug 61346 SECURITY: Make token comparison use constant time. It seems like our token...

[Parsero] Robots.txt audit tool

.PNG Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries are the URL path of directories or files hosted on a web server which the administrators don't want to be indexed by the crawlers. For example,...

DEBIAN-CVE-2012-1013

The check16dummy function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service NULL pointer dereference and daemon crash via a KRB5KDBDISALLOWALLTIX create request that...

CVE-2011-5093

Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than...

openSUSE Security Update : xen-201004 (openSUSE-SU-2010:0293-1)

Collective Xen 2010/04 Update, containing fixes for the following issues : bnc576832 - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under...

With robots. txt explore Google Baidu hidden secrets-loopholes warning-the black bar safety net

Search engine through a program robot, also known as spider will automatically visit web pages on the Internet and obtain web page information. However, if the site of some of the information don't want to be someone else searched, 可以创建一个纯文本文件robots.txt and put in the root directory of the site...

PT-1999-1527 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH version 1.2.27 Description: The issue allows a client to use the "none" cipher, even if it is not allowed by the server policy, in an SSH server. Recommendations: For OpenSSH version 1.2.27, update the server configuration to explicit...