3170 matches found
CVE-2014-5196
Cross-site request forgery CSRF vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the...
CVE-2014-5196
The CVE-2014-5196 entry details a CSRF vulnerability in the WordPress plugin Improved User Search in Backend (backend) prior to version 1.2.5. The flaw resides in the iusib_meta_fields parameter, enabling remote attackers to hijack administrator authentication by injecting XSS sequences. Affected...
EFF Releases Open Wireless Router Firmware
The EFF is working on an open wireless router firmware that’s designed to be a secure and flexible alternative to the existing software that runs on home and small business routers, much of which is notoriously insecure. The Open Wireless Router project, which the organization announced at the HO...
Wireshark v1.11.3 - The world’s foremost network protocol analyzer
Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...
Microsoft is sponsoring the Cyber Security Challenge UK
The global adoption of computing continues to draw attackers toward ever-richer targets. The latest data from the Microsoft Security Intelligence Report shows that although industry-wide vulnerability disclosures are down and computer defenses are improved, exploit activity has actually increased...
Microsoft Exchange Server MIME Base64 Decoding Code Execution (MS07-026; CVE-2007-0213) - Improved Performance
A vulnerability exists in the way Microsoft Exchange servers process certain MIME-encoded attachments. An attacker can exploit this vulnerability for code execution in SYSTEM security context...
[Arachni v0.4.2] web application security scanner (Boosted with new UI)
Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by learning from the HTTP responses it receives during the audit process and is...
Fedora 17 : trousers-0.3.9-1.fc17 (2012-12973)
This update closes a small security issue where a remote user could crash tscd if it were enabled for networking. This update also has improved init scripts which should make it load quicker. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Scientific Linux Security Update : pam on SL5.x
Problem description : A flaw was found in the way pamconsole set console device permissions. It was possible for various console devices to retain ownership of the console user after logging out, possibly leaking information to another local user. CVE-2007-1716 A flaw was found in the way the PAM...
Sandcat Browser 2.0 Released - Penetration Testing Oriented Browser
Sandcat Browser 2.0 Released, Penetration Testing Oriented Browser Sandcat Browser version 2.0 includes several user interface and experience improvements, an improved extension system, RudraScript support and new extensions. What is Sandcat Browser? The fastest web browser combined with the...
Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6
Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6 Official Change Log: o NSE Added 40 scripts, bringing the total to 217! You can learn more about any of them at https://nmap.org/nsedoc/. Here are the new ones authors listed in brackets: + afp-ls: Lists files and their attributes from Apple...
Fedora 14 : pootle-2.1.2-1.fc14 (2010-17000)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Update : SQLNinja 0.2.5 - New Version
"Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help a...
SuSE 10 Security Update : vim (ZYPP Patch Number 6025)
The VI Improved editor vim received bugfixes for some code execution problems. - Arbitrary code execution in vim helper plugins filetype.vim, zipplugin, xpm.vim, gzipvim, and netrw were fix ed. CVE-2008-4101: Arbitrary code execution when pressing K, ctrl- or g depending on the text under the...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3376
Check for the Version of php-pear-MDB2-Driver-mysqli OpenVAS Vulnerability Test Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3376 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3369
Check for the Version of php-pear-MDB2-Driver-mysqli OpenVAS Vulnerability Test Fedora Update for php-pear-MDB2-Driver-mysqli FEDORA-2007-3369 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
[SECURITY] Fedora 7 Update: php-pear-MDB2-Driver-mysqli-1.4.1-3.fc7
This is the MySQL Improved MDB2 driver...
Fedora 7 : bind-9.4.1-4.fc7 (2007-0300)
236426 - improved zone-finding on server side rndc freeze works better 235809 - fixed race-condition in dbus code 241103 - fixed typo in bind-chroot-admin 239802 - start using deprecated LDAP API 239149 - handle dynamic zone updates CVE-2007-2241 Note that Tenable Network Security has extracted t...
envo.txt
Description: eNvolution is a fork of PostNuke. The entire core of the product is being replaced and improved, making it far more secure and stable, and able to work in high-volume environments with ease. vendor: http://www.envolution.com Vulnerability: SQL injection AND XSS sploit...
