528 matches found
Custom-SSH-Backdoor - SSH Backdoor using Paramiko
Custom ssh backdoor, coded in python using Paramiko. Paramiko is a Python 2.6+, 3.3+ implementation of the SSHv2 protocol, providing both client and server functionality. While it leverages a Python C extension for low level cryptography PyCrypto, Paramiko itself is a pure Python interface around...
[SECURITY] Fedora 22 Update: opensaml-java-xmltooling-1.3.4-9.fc22
Java XMLTooling is a low-level library that may be used to construct librar ies that allow developers to work with XML in a Java beans manner...
[SECURITY] Fedora 20 Update: util-linux-2.24.2-2.fc20
The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...
leadtools activex common dialogs 16.5 - Multiple Vulnerabilities
No description provided by source. LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that h...
OpenSC 0.11.x PKCS#11 Implementation Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33922/info OpenSC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access to private data, which may lead to other attacks. Versions prior to OpenSC 0.11.7 are...
Joomla Link Directory Component <= 1.0.3 - Remote Include Vulnerability
No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 18.o8.2oo6 .. Affected Application: Link Directory = v1.0.3 Mambo/Joomla CMS...
Debian Security Advisory DSA 2953-1 (dpkg - security update)
Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...
CVE-2014-2042 - Unrestricted file upload in Livetecs Timelive
Vulnerability title: Unrestricted file upload in Livetecs Timelive CVE: CVE-2014-2042 Vendor: Livetecs Product: Timelive Affected version: 6.2.71 Fixed version: 6.5.1 Reported by: Richard Hatch Details: It was discovered that it was possible for low-level TimeLive application users to upload file...
Debian Security Advisory DSA 2915-1 (dpkg - security update)
Jakub Wilk discovered that dpkg did not correctly parse C-style filename quoting, allowing for paths to be traversed when unpacking a source package - leading to the creation of files outside the directory of the source being unpacked. The update to the stable distribution wheezy incorporates...
Livetecs Timelive 6.2.71 Unauthenticated File Upload
Vulnerability title: Unrestricted file upload in Livetecs Timelive CVE: CVE-2014-2042 Vendor: Livetecs Product: Timelive Affected version: 6.2.71 Fixed version: 6.5.1 Reported by: Richard Hatch Details: It was discovered that it was possible for low-level TimeLive application users to upload file...
[SECURITY] Fedora 20 Update: python-logilab-common-0.61.0-1.fc20
This package contains several modules providing low level functionality shared among some python projects developed by logilab...
Microsoft EPD - CS Flash Cross Site Web Vulnerability
Document Title: =============== Microsoft EPD - CS Flash Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Microsoft Security Response Center MSRC ID: 15156 Release Date: ============= 2013-07-28 Vulnerability Laboratory I...
[SECURITY] Fedora 18 Update: nodejs-ctype-0.5.3-3.fc18
Node-CType is a way to read and write binary data in a structured and easy to use format. Its name comes from the C header file. There are two APIs that you can use, depending on what abstraction you'd li ke. The low level API lets you read and write individual integers and floats fr om buffers...
gpEasy CMS - XSS Vulnerability
gpEasy CMS, http://www.gpeasy.com/ Easy to use True WYSIWYG Editing. Flat-file data storage and advanced resource management for fast websites. 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...
Wordpress Plugin Token Manager - XSS Vulnerability
Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1...
apache22 -- several vulnerabilities
Apache HTTP SERVER PROJECT reports: low: XSS in modnegotiation when untrusted uploads are supported CVE-2012-2687 Possible XSS for sites which use modnegotiation and allow untrusted uploads to locations which have MultiViews enabled. low: insecure LDLIBRARYPATH handling CVE-2012-0883 This issue w...
SonicWall PolicyManager Module - Cross Site Vulnerability
Document Title: =============== SonicWall PolicyManager Module - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=529 Release Date: ============= 2012-09-01 Vulnerability Laboratory ID VL-ID: ==================================== 5...
Scientific Linux Security Update : util-linux on SL5.x i386/x86_64 (20120221)
The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, util-linux contains the fdisk configuration tool and the login program. Multiple flaws were found in the way the mount and umount commands performed mtab...
[SECURITY] Fedora 15 Update: colord-0.1.15-1.fc15
colord is a low level system activated daemon that maps color devices to color profiles in the system context...
Fedora Update for colord FEDORA-2011-16451
Check for the Version of colord OpenVAS Vulnerability Test Fedora Update for colord FEDORA-2011-16451 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...