CVE-2012-6102

lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments aka feedback comments of arbitrary users via a crafted URI...

Oracle Releases January 2013 Security Advisory

Oracle has released its Critical Patch Update for January 2013 to address 86 vulnerabilities across multiple products. This update contains the following security fixes: 6 for Oracle Database Server 7 for Oracle Fusion Middleware 13 for Oracle Enterprise Manager Grid Control 9 for Oracle E-Busine...

Dedecms v5.7 plus\feedback.php SQL注入漏洞

No description provided by source...

Google Releases Google Chrome 23.0.1271.97

Google has released Google Chrome 23.0.1271.97 for Windows, Mac, Linux, and ChromeFrame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial of service. US-CERT encourages users and administrators to review the Google Chrome...

Microsoft Releases November 2012 Security Bulletin

Microsoft has released updates to address multiple vulnerabilities in Microsoft Windows Shell, .NET Framework, Windows Kernel-Mode drivers, Excel, Internet Information Services IIS, and cumulative security updates for Internet Explorer as part of the Microsoft Security Bulletin Summary for Novemb...

Cisco Releases Security Advisory for Cisco Prime Data Center Network Manager

Cisco Prime Data Center Network Manager DCNM contains a remote command execution vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary commands on the computer that is running the Cisco Prime DCNM application. Cisco has released software updates that address this...

dedeCMS latest injection vulnerability a gold-bug warning-the black bar safety net

Brief description: Since the parameters of the variables not be initialized testing and using the class reflection skills leads to plus\feedback.php in the variable $typeid presence of injection risk. Detailed description: Since the official has already released patches and vulnerabilities are no...

Unfixed XSS vulnerability at www.europcarug.com

Security researcher Ryuzaki, has submitted on 10/04/2012 a cross-site-scripting XSS vulnerability affecting www.europcarug.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2012. It is currently...

Time difference between Veeam Monitor server and ESX host is too large.

Challenge When attempting to add a vCenter Server or a standalone host with a different time zone, the operation may fail with the error: Failed to connect to "". Time difference between Veeam Monitor server and ESX host is too large. Make sure that NTP is enabled on ESX host and try again. Cause...

Microsoft Releases September Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Development Tools and Server Software as part of the Microsoft Security Bulletin summary for September 2012. These vulnerabilities may allow an attacker to operate with elevated privileges. US-CERT encourages users and...

Microsoft Releases August Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Office, SQL Server, Server Software, Developer Tools, and Exchange Server as part of the Microsoft Security Bulletin summary for August 2012. These vulnerabilities may allow an attacker to execute...

Nasa Cross Site Scripting

Exploit Title: Feedback form heasarc.gsfc.nasa.gov Cross Site Scripting Date: 13/08/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com/ Category: webapps Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Exploit/p0c :...

Small windows can be used in several ways to trick users into executing downloads

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

Sql injection

SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data...

CVE-2012-3395

SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data...

How to install a standalone Veeam Report Viewer

Purpose You need to install a standalone Veeam Report Viewer to view offline reports. Solution There are several options to install Veeam Report Viewer: Veeam ONE ISO file : You can start Veeam Report Viewer setup from the ISO file: VeeamONE10.0.0.750.iso\Redistr\ReportViewer.msi. Veeam ONE...

Veeam Management Pack for Microsoft System Center "Failed to Login" or "Cannot Complete Login" troubleshooting

Purpose The following errors occur: Login failed or Cannot complete login You may see the following event in the Veeam Management Pack for Microsoft System Center logs or receive a similar notification: ERROR IMon Quering IP or VC Name failed: Veeam.LicenseServer.LsException: Soap login to 'IP or...

GuestBook Scripts PHP v1.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= GuestBook Script PHP is a script that is very easy to install,...

Hidden keyboard navigation can allow cross site scripting or code execution

When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...

Adobe Releases Security Bulletins for Multiple Products

Adobe has released security bulletins to address multiple vulnerabilities for the following products: Adobe Illustrator CS5 15.0.x for Windows and Macintosh Adobe Illustrator CS5.5 15.1 for Windows and Macintosh Adobe Photoshop CS5 12.0 for Windows and Macintosh Adobe Photoshop CS5.1 12.1 for...