Lucene search
+L

2131 matches found

ThreatPost
ThreatPost
•added 2011/10/04 2:12 p.m.•17 views

Find My iPhone App, 4.0

Despite all the hype about a coming wave of mobile device viruses and worms, lost and stolen mobile phones are the biggest security threat to consumers and employers, too. To address the “scatterbrain” threat, Apple introduced ‘Find My iPhone’ application for the iPhone 4 in June, 2010. Part of...

2.7AI score
SaveExploits0
NVD
NVD
•added 2011/04/10 2:51 a.m.•26 views

CVE-2011-1661

The Node Quick Find module 6.x-1.1 for Drupal does not use dbrewritesql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature...

5CVSS6.6AI score0.0147EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2011/04/10 1:00 a.m.•37 views

CVE-2011-1661

The Node Quick Find module 6.x-1.1 for Drupal does not use dbrewritesql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature...

6.6AI score0.0147EPSS
SaveExploits0References6
CVE
CVE
•added 2011/04/10 1:00 a.m.•48 views

CVE-2011-1661

The CVE-2011-1661 entry affects the Drupal Node Quick Find module 6.x-1.1. The vulnerability arises because the module does not use db_rewrite_sql when presenting node titles, allowing an attacker to bypass access restrictions and read potentially sensitive node titles via the autocomplete featur...

5CVSS6.8AI score0.0147EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/04/10 12:00 a.m.•10 views

CVE-2011-1661: Undefined Security Weakness

The Node Quick Find module 6.x-1.1 for Drupal does not use dbrewritesql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature...

5CVSS5.9AI score0.0147EPSS
SaveExploits0References2
Drupal
Drupal
•added 2011/04/06 12:00 a.m.•20 views

SA-CONTRIB-2011-016 - Node Quick Find - Information Disclosure

The Node Quick Find module provides a block to quickly access nodes by title via an auto-completing text field. The module does not use dbrewritesql when generating the list of node titles, allowing users to see the titles of nodes to which they may not have access. Access to the node itself is n...

7.1AI score
SaveExploits0References9
ThreatPost
ThreatPost
•added 2010/11/22 8:51 p.m.•9 views

Security A Hidden Benefit of iOS 4.2 Update

Apple iPhone and iPad users are buzzing about the new features that come with the latest update to the company’s iOS mobile operating system. But the update also contains dozens of fixes for security holes that could have allowed attackers to compromise the popular devices using malicious PDF...

0.8AI score
SaveExploits0References4
OSV
OSV
•added 2010/09/30 3:00 p.m.•6 views

DEBIAN-CVE-2010-3434

Buffer overflow in the findstreambounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party informatio...

9.3CVSS7AI score0.06533EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2010/09/17 12:00 a.m.•28 views

openSUSE Security Update : popt (openSUSE-SU-2010:0629-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also following bugfixes were merged from SLE11 : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used...

7.2CVSS7.2AI score0.00399EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2010/08/17 3:52 p.m.•15 views

kernel: keyrings: find_keyring_by_name() can gain the freed keyring

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

7CVSS7.2AI score0.00658EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
•added 2010/07/30 12:00 a.m.•16 views

MDVA-2010:161 : findutils

The find utility in Mandriva Linux 2010.0 could give bogus 'No such file or directory' messages, when run from msec application. This advisory updates the find application to the latest available version, fixing this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

6.9AI score
SaveExploits0References1
Exploit DB
Exploit DB
•added 2010/07/08 12:00 a.m.•36 views

Find all writeable folder in filesystem linux polymorphic shellcode 91 bytes

Find all writeable folder in filesystem linux polymorphic shellcode - 91 bytes. Shellcode exploit for linux platform / Title : Find all writeable folder in filesystem linux polymorphic shellcode . Name : 91 bytes Find all writeable folder in filesystem linux polymorphic shellcode . Date : Sat Jun...

7.4AI score
SaveExploits0
CVE
CVE
•added 2010/05/07 6:23 p.m.•132 views

CVE-2010-1437

CVE-2010-1437 is a race condition in the Linux kernel’s keyring handling (find_keyring_by_name in security/keys/keyring.c) affecting version 2.6.34-rc5 and earlier. A local user can exploit this via keyctl session commands that access a dead keyring being deleted by key_cleanup, leading to memory...

7CVSS7.2AI score0.00658EPSS
SaveExploits3References21Affected Software1
OpenVAS
OpenVAS
•added 2010/04/27 12:00 a.m.•37 views

List Files with setuid-bit in / and /home, Check /tmp for sticky-bit

This plugin uses SSH to list files with setuid-bit in / and /home, check /tmp for sticky-bit. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/03/30 12:00 a.m.•19 views

Fa Home - Authentication Bypass

Fa Home - Authentication Bypass ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Français V.Pn...

0.5AI score
SaveExploits0
zdt
zdt
•added 2010/03/30 12:00 a.m.•26 views

Fa Home (Auth Bypass) Vulnerability

Exploit for php platform in category web applications =================================== Fa Home Auth Bypass Vulnerability =================================== ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability |...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/03/30 12:00 a.m.•37 views

Satellite-X 4.0 - Authentication Bypass

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009 © Satellite-X | Tested on: windows...

5.8AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2010/02/26 7:13 p.m.•16 views

Making friends

Hover your cursor atop Friends and click on Find Friends and you get this page, except you’ll likely have pictures. These are your friends’ friends. You can decide to ask these people to be your friends by clicking “Add as friend” or X to remove them from this list. You might also find it easier ...

0.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/02/26 12:00 a.m.•27 views

Options for Local Security Checks

This script allows users to set some Options for Local Security Checks. These data are stored in the knowledge base and used by other tests. OpenVAS $Id: lscoptions.nasl 7822 2017-11-20 08:46:09Z cfischer $ Description: This script allows to set some Options for LSC. Authors: Michael Meyer...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/02/26 12:00 a.m.•48 views

Options for Local Security Checks

This script allows users to set some Options for Local Security Checks which are stored in the knowledge base and used by other tests. Description of the options: - Also use SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder