7916 matches found
[SECURITY] Fedora 15 Update: python-crypto-2.3-6.fc15
Python-crypto is a collection of both secure hash functions such as MD5 and SHA, and various encryption algorithms AES, DES, RSA, ElGamal, etc...
[SECURITY] Fedora 17 Update: python-crypto-2.6-1.fc17
PyCrypto is a collection of both secure hash functions such as MD5 and SHA, and various encryption algorithms AES, DES, RSA, ElGamal, etc...
TinyCMS v1.3 <= XSRF/LFI/FU Multiple Vulnerabilities
Exploit for php platform in category web applications Happy Milw0rm 1337 Day!!! Congratulations all h4x0rz 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...
CVE-2012-2352
The archive management arcmanage page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the 1 doarcmanage, 2 doarcdownload, or 3 doarcdelete functions...
WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)
source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the...
Google Chrome Multiple Vulnerabilities(02) - May 12 (Windows)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmay12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities02 - May 12 Windows Authors: Madhuri D Copyright: Copyright c 2012...
Google Chrome Multiple Vulnerabilities(02) - May 12 (Mac OS X)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmay12macosx.nasl 5912 2017-04-10 09:01:51Z teissa $ Google Chrome Multiple Vulnerabilities02 - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 20...
Symantec Web Gateway upload_file() Remote Code Execution (SYM12-006) (intrusive check)
The remote web server is hosting a version of Symantec Web Gateway with a code execution vulnerability. The uploadfile function of utilfunctions.php allows PHP files to be uploaded to a directory where the web server can execute them. This function is used by multiple PHP scripts that can be...
CVE-2011-3097: Improper Input Validation
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions...
qpid-cpp: cluster authentication ignores cluster-* settings
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes three security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 : openssl vulnerabilities (USN-1424-1)
It was discovered that OpenSSL could be made to dereference a NULL pointer when processing S/MIME messages. A remote attacker could use this to cause a denial of service. These issues did not affect Ubuntu 8.04 LTS. CVE-2006-7250, CVE-2012-1165 Tavis Ormandy discovered that OpenSSL did not proper...
CVE-2012-1808
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors...
Authentication flaw
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors...
CVE-2012-1808
CVE-2012-1808 Details across sources show a vulnerability in the web server of Koyo ECOM modules (H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F/100, H4-ECOM, H4-ECOM-F/100). The issue is Missing Authentication for a Critical Function (CWE-306): the web server does not require authentication to perform ...
CVE-2012-1808
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors...
CVE-2012-1808: Improper Authentication
The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors...
Quest vWorkspace ActiveX unauthorized access
It's possible to modfi files via unsafe functions...
Opera Large Integer Argument Denial of Service Vulnerability (Linux)
The host is installed with Opera and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperalargeintargdosvulnlin.nasl 6022 2017-04-25 12:51:04Z teissa $ Opera Large Integer Argument Denial of Service Vulnerability Linux Authors: Rachana Shetty Copyright: Copyright c...
PHP 5.4/5.3 deprecated eregi() memory_limit bypass
PHP 5.4/5.3 deprecated eregi memorylimit bypass Author: Maksymilian Arciemowicz Website: http://cxsecurity.com/ Date: 30.03.2012 Original link: http://cxsecurity.com/issue/WLB-2012030272 PoC's: memorylimit poc http://cxsecurity.com/issue/WLB-2012030271 openbasedir poc...