Frog CMS 0.9.5 - Cross-Site Request Forgery

Frog CMS 0.9.5 - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Frog Date: 13. December 2009. -------------------------------------------------------------------------------------------------...

Frog <= v0.9.5 CSRF Vulnerability

Exploit for unknown platform in category web applications ================================= Frog "...

Frog CMS 0.9.5 - Cross-Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Frog Date: 13. December 2009. -------------------------------------------------------------------------------------------------...

ntp-info NSE Script

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a "read variables" opcode 2 control message. Without verbosity, the script shows the time and the value of the version, processor, system, refid, and stratum variables. With verbosity, all...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

SNMP Query WLAN SSID (Cisco)

It is possible to obtain the system information about the remote WLAN by sending SNMP requests with the OID 1.3.6.1.4.1.9.9.512.1.1.1.1.4.1 to the remote Access Point controller. An attacker may use this information to gain more knowledge about the target network. TRUSTED...

Simple Machines Forum Multiple Security Vulnerabilities

No description provided by source. Simple Machines Forum is prone to multiple security vulnerabilities: - A remote PHP code-execution vulnerability - Multiple cross-site scripting vulnerabilities - Multiple cross-site request-forgery vulnerabilities - An information-disclosure vulnerability -...

Domain name hijacking assault a few steps as follows-vulnerability warning-the black bar safety net

1, access to the hijacking of the domain name registration information The attacker will first access network solutions company www. networksolutions is. com, via the company home page The MAKE CHANGES function, enter you want to query the domain to get the domain name registration information to...

Novell ZENworks Desktop Management Installation Service Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to impersonate valid users in vulnerable installations of Novell ZENworks Desktop Management. Authentication is not required to exploit this vulnerability. The specific flaw exists due to an information leak when querying the AWSI service which listens b...

PDFs on IE8 Can Disclose User Path Info

Using Internet Explorer and a virtual PDF generator to print a PDF file from a HTML page causes the document’s entire storage path, for example file://C:UsersdabDownloadsdocument.pdf, to be stored in the document itself. Read the full article. The H Security...

CVE-2009-2835

CVE-2009-2835 affects the Apple Mac OS X kernel prior to 10.6.2, where the kernel’s handling of task state segments contains input validation issues. This can allow local users to gain privileges, cause a system crash (DoS), or disclose sensitive information via unspecified vectors. The connected...

CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation)

source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that exploits for some of the issues may...

CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that exploits for some of the issues may...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7

The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...

Linux Kernel 2.6.x - 'pipe.c' Local Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/36901/info Linux kernel is prone to a local privilege-escalation vulnerability that is caused by a NULL-pointer dereference. Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result i...

PT-2009-5987 · Vmware · Vmware Esxi +1

Name of the Vulnerable Software and Affected Versions: VMware Server versions 1.x through 1.0.9 and 2.x through 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.3 and 3.5 Description: A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors...

Mura CMS <= 5.1 xss

Exploit for unknown platform in category web applications =================== Mura CMS = 5.1 xss =================== Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir...

Mura CMS 5.1 Folder Disclosure

ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...