449 matches found
Barracuda Backup 2.0 Cookie Manipulation
Title: ====== Barracuda Backup v2.0 - Multiple Web Vulnerabilities Date: ===== 2011-09-28 References: =========== Barracuda Backup Application v2.0 VL-ID: ===== 31 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Barracuda Backup Service is a complete a...
Hack Targets NASA's Earth Observation System
A hacker is claiming that a security hole in a server at NASA’s Goddard Space Flight Center has exposed data related to a satellite-based Earth observation system used to aid in disaster relief. The hacker, who uses the handle “Tinkode” has published a screen capture from what he claims is an FTP...
Experts Warn Of Japan Earthquake, Tsunami Spam
As the Pacific Rim braces for deadly Tsunami’s spawned by today’s magnitude 8.9 earthquake in Japan, the SANS Internet Storm Center says users should be on the lookout for a different kind of Tsunami: scam e-mail and Web pages looking to turn curiosity about the events in Japan into illicit gain...
Lessons to learn from the HBGary Federal hack !
The Anonymous attack on HBGary may have amused some who enjoyed the sight of a security firm left embarrassed and exposed, but it should send a shiver down the spine of any IT administrator responsible for securing their own company. Because can you honestly put your hand on your heart and say a...
sahana agasti 0.6.5 - Multiple Vulnerabilities
sahana agasti 0.6.5 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com dun / 2011-01-07 Sahana Agasti = 0.6.5 Multiple Vulnerabilities Script: "Agasti i...
Sahana Disaster Management System 'sel' Parameter SQL Injection Vulnerability
Sahana Disaster Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...
Sahana Disaster Management System 'sel' Parameter SQL Injection Vulnerability
Sahana Disaster Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...
Sahana Agasti 0.6.4 SQL Injection
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com Sahana Agasti Connect$conf'dbhost'.$conf'dbport'?':'.$conf'dbport':'',$conf'dbuser',$conf'dbpass',$conf'dbname'; $level=$GET"sel...
Sahana Agasti <= 0.6.4 SQL Injection Vulnerability
Exploit for php platform in category web applications Sahana Agasti Connect$conf'dbhost'.$conf'dbport'?':'.$conf'dbport':'',$conf'dbuser',$conf'dbpass',$conf'dbname'; $level=$GET"sel";...
Malware Cited As Accomplice to 2008 Spanair Crash
A virus-carrying USB thumb drive has been implicated in the 2008 crash of a Spanish jetliner, the deadliest air disaster in Spanish history. Read the full article. El Pais...
[SECURITY] Fedora 12 Update: sahana-0.6.3-1.fc12
Sahana is a free and open source Disaster Management System.It mainly facilitates management of Missing people, disaster victims, Managing and administrating various organisations, managing camps and managing requests and assistance in the proper distribution of resources...
Fedora Update for sahana FEDORA-2010-6379
Check for the Version of sahana OpenVAS Vulnerability Test Fedora Update for sahana FEDORA-2010-6379 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2010-1191
CVE-2010-1191 affects Sahana disaster management system 0.6.2.2 (and possibly other versions) and allows a remote attacker to bypass access restrictions and disable administrator authentication via a direct request to stream.php in the admin module (acl_enable_acl action). Documented by NVD and m...
Sahana Detection
This host is running Sahana, a Free and Open Source Disaster Management system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sahana Detection
This host is running Sahana, a Free and Open Source Disaster Management system. OpenVAS Vulnerability Test $Id: sahanadetect.nasl 5744 2017-03-28 07:25:23Z cfi $ Sahana Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...
[SECURITY] Fedora 10 Update: sahana-0.6.2.2-6.fc10
Sahana is a free and open source Disaster Management System.It mainly facilitates management of Missing people, disaster victims, Managing and administrating various organisations, managing camps and managing requests and assistance in the proper distribution of resources...
[SECURITY] Fedora 11 Update: sahana-0.6.2.2-6.fc11
Sahana is a free and open source Disaster Management System.It mainly facilitates management of Missing people, disaster victims, Managing and administrating various organisations, managing camps and managing requests and assistance in the proper distribution of resources...
php168 v2008 default setting of the disaster-vulnerability warning-the black bar safety net
index.php Section 6 3 line start 1. elseif$webdbNewsMakeHtml==1 //if it is to generate static and... 2. 3. $content=obgetcontents; 4. obendclean; 5. obstart; //spare 6. $content=makehtml$content,'index'; 7. echo "$content"; 8. makehtml function code 1. function makehtml$content,$pagetype=" 2...
Cisco Unified Communications灾难恢复框架远程命令执行漏洞
BUGTRAQ ID: 28591 CVECAN ID: CVE-2008-1154 灾难恢复框架（DRF）是Cisco Unified Communications产品家族中一些产品间所共享的功能，允许管理员将系统配置备份和恢复到本地磁带驱动或远程服务器。 DRF Master服务器负责执行备份和恢复请求。DRF Master服务器对从网络接收到的请求没有执行认证，未经认证的远程用户可以连接到DRF Master服务器并执行任何DRF相关的任务，包括： 修改或删除计划备份 将系统备份拷贝到用户指定的远程服务器 从远程服务器恢复用户指定的配置 执行任意操作系统命令...
