Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-3946

Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2011-3946 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

FreeBSD Ports: tomcat55

The remote host is missing an update to the system as announced in the referenced advisory. VID 553ec4ed-38d6-11e0-94b1-000c29ba66d2 OpenVAS Vulnerability Test $ Description: Auto generated from VID 553ec4ed-38d6-11e0-94b1-000c29ba66d2 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Mozilla Foundation Security Advisory 2011-04

Mozilla Foundation Security Advisory 2011-04 Title: Buffer overflow in JavaScript upvarMap Impact: Critical Announced: March 1, 2011 Reporter: Christian Holler Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher Christian Holler...

Mozilla Foundation Security Advisory 2011-03

Mozilla Foundation Security Advisory 2011-03 Title: Use-after-free error in JSON.stringify Impact: Critical Announced: March 1, 2011 Reporter: regenrecht Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher regenrecht reported via...

Mozilla Foundation Security Advisory 2011-08

Mozilla Foundation Security Advisory 2011-08 Title: ParanoidFragmentSink allows javascript: URLs in chrome documents Impact: Moderate Announced: March 1, 2011 Reporter: Roberto Suggi Liverani Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 Thunderbird 3.1.8...

Mozilla Releases Updates for Firefox, Thunderbird, and SeaMonkey

The Mozilla Foundation has released Firefox 3.6.14 and Firefox 3.5.17 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, conduct cross-site request forgery attacks, cause a denial-of-service condition, or operate with elevat...

Zikula CMS 1.2.4 - Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98060/zikulacms-xsrf.txt ==================================================== Zikula CMS 1.2.4 = Cross Site Request Forgery CSRF Vulnerability ==================================================== 1. OVERVIEW The Zikula 1.2.4 and lower versions wer...

Zikula CMS 1.2.4 - Cross-Site Request Forgery

Zikula CMS 1.2.4 - Cross-Site Request Forgery Source: http://packetstormsecurity.org/files/view/98060/zikulacms-xsrf.txt ==================================================== Zikula CMS 1.2.4 = Cross Site Request Forgery CSRF Vulnerability ==================================================== 1...

Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability

==================================================== Zikula CMS 1.2.4 = Cross Site Request Forgery CSRF Vulnerability ==================================================== 1. OVERVIEW The Zikula 1.2.4 and lower versions were vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND Zikula is a...

Fedora Web Site Hacked, But the Servers Undamaged !

An attacker who had credentials and the use of taxpayer Fedora Fedora server, but the project leaders say the assailants apparently managed to compromise any software or servers. An attacker has attempted to compromise the servers for the Fedora Project, the community version of Red Hat Enterpris...

Lolz ! I've won three million Euros from Bill Gates !

Excuse me for typing breathlessly, faithful Naked Security reader, but I have some incredible news to share. I have just been informed that I have won three million Euros from none other than the Bill Gates Foundation! I had no idea that the Bill and Melinda Gates Foundation, which normally fight...

Sahana Agasti Multiple Remote File Include Vulnerabilities

Sahana Agasti is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the webserve...

Sahana Agasti 0.6.4 SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com Sahana Agasti Connect$conf'dbhost'.$conf'dbport'?':'.$conf'dbport':'',$conf'dbuser',$conf'dbpass',$conf'dbname'; $level=$GET"sel...

Facebook Revises Bug Disclosure Policy

Social networking behemoth Facebook revised their bug disclosure policy last week to protect well-intentioned vulnerability researchers from potential lawsuits stemming from their discoveries. The revisions, which were made with the assistance of the Electronic Frontier Foundation, are part of...

Mozilla Foundation Security Advisory 2010-77

Mozilla Foundation Security Advisory 2010-77 Title: Crash and remote code execution using HTML tags inside a XUL tree Impact: Critical Announced: December 9, 2010 Reporter: wushi Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 SeaMonkey 2.0.11 Description Security researcher...

Mozilla Foundation Security Advisory 2010-83

Mozilla Foundation Security Advisory 2010-83 Title: Location bar SSL spoofing using network error page Impact: High Announced: December 9, 2010 Reporter: Michal Zalewski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 SeaMonkey 2.0.11 Description Google security researcher...

Mozilla Releases Firefox 3.6.13

The Mozilla Foundation has released Firefox 3.6.13 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, operate with elevated privileges, spoof the location bar, or operate with elevated privileges. The Mozilla foundation has also released...

Mozilla Foundation Security Advisory 2010-75

Mozilla Foundation Security Advisory 2010-75 Title: Buffer overflow while line breaking after document.write with long string Impact: Critical Announced: December 9, 2010 Reporter: Dirk Heinrich Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 Thunderbird 3.1.7...

Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkzigbeezcldissectordosvulnwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability Windows Authors: Antu Sanadi...

Researchers Tracking Emerging Darkness Botnet

Researchers are tracking a new botnet that has become one of the more active DDoS networks on the Internet since its emergence early last month. The botnet, dubbed “Darkness,” is being controlled by several domains hosted in Russia and its operators are boasting that it can take down large sites...