Private video streams can be intercepted – Opera Security Advisories

Private video streams can be intercepted – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description Video content may be used as filler content for a HTML5 canvas, if the video format is natively supported by Opera. If the video and page are from the same site, the...

Fedora Update for cabextract FEDORA-2010-14722

Check for the Version of cabextract OpenVAS Vulnerability Test Fedora Update for cabextract FEDORA-2010-14722 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 13 Update: cabextract-1.3-1.fc13

cabextract is a program which can extract files from cabinet .cab archives...

[SECURITY] Fedora 12 Update: cabextract-1.3-1.fc12

cabextract is a program which can extract files from cabinet .cab archives...

Apple Airport Extreme Password Extraction (WDBRPC)

This module can be used to read the stored password of a vulnerable Apple Airport Extreme access point. Only a small number of firmware versions have the WDBRPC service running, however the factory configuration was vulnerable. It appears that firmware versions 5.0.x as well as 5.1.x are...

mBlogger 1.0.04 - 'viewpost.php' SQL Injection

!/usr/bin/python Exploit Title: mBlogger v1.0.04 viewpost.php SQL Injection Exploit Date : 31 August 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/mblogger/ Version : 1.0.04 Tested on : EasyPHP 5.3.1.0 for...

Blogman 0.7.1 SQL Injection

!/usr/bin/python Exploit Title: Blogman v0.7.1 profile.php SQL Injection Exploit Date : 28 August 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/blogman/ Version : 0.7.1 Tested on : EasyPHP 5.3.1.0 for Windo...

Cetera eCommerce 14.0 Cross Site Scripting / SQL Injection

============================================================= I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 SecurityVulns ID: 10489. ----------------------------- Advisory: Vulnerabilities in Cetera eCommerce...

PHP-Nuke 8.0 News SQL Injection

!/usr/bin/perl 0-Day PHP-Nuke newPOST = $HostName.'modules.php?name=News'; my $Cookies = new HTTP::Cookies; my $UserAgent = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, defaultheaders = HTTP::Headers-new, or die $!; my $Referrer = "sid=Dante90, WaRWolFz Crew...

NO-IP.com Dynamic DNS Update Client 2.2.1 - Request Insecure Encoding Algorithm

NO-IP.com Dynamic DNS Update Client 2.2.1 - Request Insecure Encoding Algorithm !/usr/bin/python """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// //...

fastjar archiver directory traversal

Directory traversal during file extraction...

cPanel Username look Remote Exploit

Exploit for php platform in category web applications =================================== cPanel Username look Remote Exploit =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter to 1 docs.php and 2 include/admin/deviceadmin.php. NOTE: the header.php vector is already covered by...

MusicBox v 3.3 SQL Injection Exploit

Exploit for php platform in category web applications ==================================== MusicBox v 3.3 SQL Injection Exploit ==================================== !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-16.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Moderate: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Automated Malware Tools At Heart of Data Extraction

Most attention goes to keeping hackers out. But once they’re inside, how do they extract data? Research of 200 data breaches in 24 countries examines the ways data is leaving. Read the full article. CSO...

Abton CMS SQL Injection

Hello Full-Disclosure! I want to warn you about vulnerabilities in Abton. It's commercial Ukrainian CMS. ----------------------------- Advisory: Vulnerabilities in Abton ----------------------------- URL: http://websecurity.com.ua/2886/ ----------------------------- Timeline: 31.03.2008 - found t...

GNU Tar and GNU Cpio heap-based buffer overflow vulnerability

Exploit for unknown platform in category local exploits ============================================================= GNU Tar and GNU Cpio heap-based buffer overflow vulnerability ============================================================= I. BACKGROUND GNU Tar and GNU Cpio are popular programs...

Fedora Update for chmsee FEDORA-2010-1936

Check for the Version of chmsee OpenVAS Vulnerability Test Fedora Update for chmsee FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...