LinSSID - Graphical wireless scanning for Linux (similar to Inssider)

LinSSID is graphically and functionally similar to Inssider Microsoft™ Windows®. It is written in C++ using Linux wireless tools, Qt5, and Qwt 6.1. LinSSID may be installed either by downloading source or binary from this site, or if you're using Debian/Ubuntu or one of its brethren, adding a ppa...

CentOS 5 : kernel (CESA-2014:0926)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Family CMS 2.9 and earlier multiple Vulnerabilities

1- CSRF缺陷 : 利用的POC如下： POC 1: Page "familynews.php" function autosubmit document.getElementById'ChangeSubmit'.submit; POC 2:页面 "prayers.php" function autosubmit document.getElementById'ChangeSubmit'.submit; input type="hidden" name="desc" value="testtes...

IRCCloud: Password type input with auto-complete enabled

Vulnerability description : When a new name and password is entered in a form and the form is submitted, the browser asks if the password should be saved. Thereafter when the form is displayed, the name and password are filled in automatically or are completed as the name is entered. An attacker...

MS14-019 – Fixing a binary hijacking via .cmd or .bat file

Command .cmd and batch .bat files can be directly provided as input to the CreateProcess as if it is an executable. CreateProcess uses the cmd.exe automatically to run the input .cmd or .bat. Today, with the bulletin MS14-019 we are fixing a vulnerability, where in particular scenario it is...

Accept Answer URL should be idempotent and accept PUT or POST requests only

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-46610. panel Answers currently users a single URL to both accept and un-accept answers: noformat $baseurl/acceptanswer/$answeri...

[GDB] GNU Project Debugger

GDB, the GNU Project debugger, allows you to see what is going on inside' another program while it executes - or what another program was doing at the moment it crashed. GDB can do four main kinds of things plus other things in support of these to help you catch bugs in the act: Start your progra...

Linux Kernel 2.6.32 3.x (CentOS 56) - PERF_EVENTS Local Privilege Escalation (1)

Linux Kernel 2.6.32 3.x CentOS 56 - PERFEVENTS Local Privilege Escalation 1 / linux 2.6.37-3.x.x x8664, 100 LOC gcc-4.6 -O2 semtex.c && ./a.out 2010 [email protected], salut! update may 2013: seems like centos 2.6.32 backported the perf bug, lol. jewgold to 115T6jzGrVMgQ2Nt1Wnua7Ch1EuL9WXT2g if yo...

CentOS 6 : pcsc-lite (CESA-2013:0525)

Updated pcsc-lite packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

SuSE Update for mysql openSUSE-SU-2012:0860-1 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test $Id: gbsuse201208601.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for mysql openSUSE-SU-2012:0860-1 mysql Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Zenphoto 1.4.3.2 Cross Site Scripting

------------------------- Affected products: ------------------------- Product : Zenphoto 1.4.3.2 and maybe older fixed in 1.4.3.3 Affected function: printPublishIconLink ---------- Details: ---------- The file admin-news-articles.php calls the function printPublishIconLink which generates HTML...

mysql (CVE-2012-2122) (important)

Fixing CVE-2012-2122: authentication bypass due to incorrect type casting...

Teen's Arrest Underscores Need for More Secure Web Development

A 15-year-old who claimed he was bored when he turned to hacking was arrested for breaking into almost 260 companies during the first three months of this year, according to a ZDNet article published earlier today. Austria’s Federal Criminal Police Office said the teenager, who used the hacker...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

Module DevicePowerOn power on failed

Challenge Cause Veeam B&R creates the new adaptor with settings specified in Virtual Lab properties, however it also forces the old MAC address to be used as you see in the vmx file of a restored machine, that's why VM fails to power on as it's expecting to see mac address from VMware range. When...

It's Time to Move Away From the Build or Break Mentality

SAN FRANCISCO–The vulnerability disclosure and patching arms race that has developed in the last decade or so in the security industry has made life extremely difficult not just for the developers writing code, but also for the folks who are interested in helping to fix broken applications. A new...

openoffice.org security and bug fix update

3.2.1-19.3.0.1.el60.5 - Replaced RedHat colors with Oracle colors, OOOVENDOR with Oracle Corp., and the filename redhat.soc with oracle.soc in specfile bug10911 1:3.2.1-19.6.5 - Related: rhbz671087 set right file permissions 1:3.2.1-19.6.4 - Resolves: rhbz671087 file locks are not created with...

Path disclosure in CLANSPHERE

Vulnerability ID: HTB22692 Reference: http://www.htbridge.ch/advisory/pathdisclosureinclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Ri...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

Fedora 13 : fcron-3.0.5-1.fc13 (2010-4084)

Rebased fcron, this new version is mostly bugfixing, see referenced bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...