4881 matches found
Joomla Front-End Article Manager System Upload Vulnerability
Exploit for php platform in category web applications ============================================================ Joomla Front-End Article Manager System Upload Vulnerability ============================================================...
Joomla! Component Front-End Article Manager System - Arbitrary File Upload
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Front-End Article Manager System Upload Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author : Sid3^effects aKa...
Joomla JomSocial 1.6.288 Cross Site Scripting
Exploit Title: Joomla Component JomSocial 1.6.288 Multiple XSS Vulnerabilities Date: 26 March 2010 Author: jdc Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out...
Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities
Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit works even on 1.8RC1, however it gets sanitized once it hits the server there's an...
Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities
Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit...
iRealty PHP Real Estate Script SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: iRealty PHP Real Estate Script PHP Script SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.worksforweb.com Greetz to:Sid3^effects, MaYur, M4n0j and to all ICW members DESCRIPTION: iRealty Real Estate Script is a...
Consumer Groups Say Proposed Privacy Bill is Flawed
A long-awaited draft of a Congressional bill would extend privacy protections both on the Internet and off line, but privacy advocates said the bill did not go far enough in protecting consumers. Read the full article New York Times...
kernel: ext4: avoid divide by zero when trying to mount a corrupted file system
The ext4fillflexinfo function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ext4 filesystem containing a super block with a large FLEXBG group size aka sloggroupsperflex...
XSS Vulnerabilities in JIRA
panel:borderColor=ff0000|borderStyle=solid|bgColor=ffccccWarning: This issue is superceded by JRA-21004. Please install the patches on that issue, rather than this one. For more details, see JIRA Security Advisory -...
XSS Vulnerabilities in JIRA
panel:borderColor=ff0000|borderStyle=solid|bgColor=ffccccWarning: This issue is superceded by JRA-21004. Please install the patches on that issue, rather than this one. For more details, see JIRA Security Advisory -...
Ubuntu 9.10 : puppet vulnerabilities (USN-917-1)
It was discovered that Puppet did not drop supplementary groups when being run as a different user. A local user may be able to use this flaw to bypass security restrictions and gain access to restricted files. CVE-2009-3564 It was discovered that Puppet did not correctly handle temporary files. ...
USN-917-1: Puppet vulnerabilities
It was discovered that Puppet did not drop supplementary groups when being run as a different user. A local user may be able to use this flaw to bypass security restrictions and gain access to restricted files. CVE-2009-3564 It was discovered that Puppet did not correctly handle temporary files. ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...
CVE-2010-0971: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...
GLSA-201003-01 : sudo: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-201003-01 sudo: Privilege escalation Multiple vulnerabilities have been discovered in sudo: Glenn Waller and neonsignal reported that sudo does not properly handle access control of the 'sudoedit' pseudo-command CVE-2010-0426...
Photos
On the left is the default. You want to turn off Everyone. And change Networks so none of your networks will get automatic permission unless you specifically want that, like old school pictures. Then choose whether you want Friends of Friends, etc., or to customize, choose Some Friends. Then star...
Making friends
When making friends, consider putting them into groups. You might organize them around privacy those who know about my family and those that do not or people who know each other. People can belong to more than one group if you want. Think about what kind of friends they are. Family? Co-worker?...
Important: Red Hat Security Advisory: sudo security update
An updated sudo package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The sudo superuser do utility allows system administrators to give certain users the abilit...
Attack Combines Browser History & Social Net Groups
A group of researchers have discovered a simple way to reveal the identity of a user based on his interactions with social networks. The ‘deanonymization’ attack uses social network groups as well as some traditional browser history-stealing tactics to narrow down and find the user behind the...