111 matches found
CMSLogik 1.2.1 Multiple Persistent XSS Vulnerabilities
Summary CMSLogik is built on a solid & lightweight framework called CodeIgniter, and design powered by Bootstrap. This combination allows for greater security, extensive flexibility, and ease of use. You can use CMSLogik for almost any niche that your project might fall into. Description CMSLogik...
Ruby on Rails XML parameter injection Vulnerability(CVE-2 0 1 3-0 1 5 6)analysis-vulnerability warning-the black bar safety net
Author: wofeiwo80sec.com Note that this article is basically the article of the English version, since my level is limited, so if you see not quite understand, suggest to go to the original view. Recently, the RoR vulnerability outbreak,just yesterday, Pro morning,RoR official website released a...
10 Tips for Getting Started With Security Metrics
It’s becoming evident that security practitioners have to take on a metrics mentality to improve security operations, reduce risks and better advise their critical decisions. There are several steps an organization can take to ensure that they are on the right path. There are some must-haves that...
White House Unveils Cybersecurity Legislative Agenda
The White House proposed Thursday reforming the Federal Information Security Management Act by formalizing the Department of Homeland Security role in managing cybersecurity for the federal government's civilian computers and networks. What the Obama administration does not propose is the...
DB Audit v4.2.29 all-in-one database security and auditing solution !
DB Audit v4.2.29 all-in-one database security and auditing solution ! .DB Audit Expert is a professional all-in-one database security and auditing solution for Oracle, Sybase, DB2, MySQL and Microsoft SQL Server. DB Audit Expert enables database and system administrators, security administrators,...
Redaxo CMS 4.2.1 Remote File Inclusion Vulnerability
Exploit for php platform in category web applications ==================================================== Redaxo CMS 4.2.1 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...
The Group_concaT function is the ultimate use-vulnerability warning-the black bar safety net
Articles have been published in hackers Handbook reprint please indicate the source of! Author: Xiaohua Opening FLYH4T Big Brother“Mysql5 injection skills summary,”a paper presented by the use of“informationschema”library to implement traversal guess the library name, table name and Field name of...
[SECURITY] Fedora 10 Update: imlib2-1.4.2-2.fc10
Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing...
SmartDefense Profiles Available for Users of VPN-1 NGX R62: Assigning a Profile per Gateway
The most significant enhancement in the NGX R62 release is the enablement of SmartDefense Profiles. SmartDefense Profiles expand the flexibility and granularity of security defenses, while allowing central control and management of the security infrastructure. By defining multiple SmartDefense...
toendaCMS.txt
Description: ToendaCMS is an Open Source XML web content management system released under the GNU General Public License. You can use it for free. ToendaCMS is optimized for fast and easy setup and works on any standard webserver platform that supports PHP and was tested successfully on Windows...