[SECURITY] Fedora 18 Update: cantor-4.10.4-1.fc18

KDE Frontend to Mathematical Software...

[SECURITY] Fedora 19 Update: kremotecontrol-4.10.4-1.fc19

KRemoteControl formerly known as KDELirc is a KDE frontend for your remote controls. It allows to configure actions for button presses on remotes. All types of remotes supported by the Solid module in the KDE platform are also supported by KRemoteControl e.g. with the Linux Infrared Remote Contro...

[SECURITY] Fedora 19 Update: cantor-4.10.4-1.fc19

KDE Frontend to Mathematical Software...

CVE-2013-0136

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...

Directory traversal

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...

CVE-2013-0136

Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...

Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)

A directory traversal vulnerability has been reported in EditDocument servlet from the frontend on the Mutiny 5 appliance. Commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks...

Mutiny 5 Arbitrary File Read and Delete

This module exploits the EditDocument servlet from the frontend on the Mutiny 5 appliance. The EditDocument servlet provides file operations, such as copy and delete, which are affected by a directory traversal vulnerability. Because of this, any authenticated frontend user can read and delete...

phpwind9 给自己评分

简要描述： pw9的评分未在后台对评分对象做验证，仅做了前台隐藏，因此可以给自己评分。 详细说明： pw9评分功能仅在前台对自己的帖子隐藏了评分功能，但通过将别的评分form的pid改为自己的帖子的pid，依然能够实现对自己帖子的评分，从而实现刷分。 漏洞证明： 虽然说，在前台自己的帖子没有评分按钮。但是随便点开一个其他帖子的评分 然后把弹出的评分窗口的pid改为自己随意一个帖子的pid，点击提交 评分成功，积分到手...

[SAMHAIN v3.0.11 & BELTANE v2.4.6] Host-based intrusion detection system (HIDS)

The Samhain host-based intrusion detection system HIDS provides file integrity checking and log file monitoring/analysis , as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes. Samhain been designed to monitor multiple hosts with potentially...

phpwcms <= v1.5.4.6 "preg_replace" Multiple Vulnerabilities

Exploit for php platform in category web applications ?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite...

PHPWCMS 1.5.4.6 - preg_replace Multiple Vulnerabilities

PHPWCMS 1.5.4.6 - pregreplace Multiple Vulnerabilities ?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite...

PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities

?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite some time now. Here I will exploit one of them, but ma...

[Dissy] Graphical frontend to the objdump disassembler

Dissy is a graphical frontend to the objdump disassembler. Dissy can be used for debugging and browsing compiler-generated code. Download Dissy...

ecshop csrf getshell

简要描述： 吐槽下ecshop后台安全性真的太弱了。。前台组合xss来猥琐的让管理员后台getshell 详细说明： 0x0 后台getshell 在includes/clstemplate.php fetch函数 / 处理模板文件 @access public @param string $filename @param sting $cacheid @return sring / function fetch$filename, $cacheid = '' if !$this-seterror errorreportingEALL ^ ENOTICE; $this-seterror+...

Fedora Update for hostapd FEDORA-2012-15759

Check for the Version of hostapd OpenVAS Vulnerability Test Fedora Update for hostapd FEDORA-2012-15759 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: hostapd-1.0-3.fc18

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back- ground and acts as the backe...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...

CVE-2012-5164

Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...

CVE-2012-5164: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...