Moderate: Red Hat Security Advisory: vdsm security, bug fix, and enhancement update

Updated vdsm packages that fix one security issue, various bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.6. Such versions contain several vulnerabilities : - A heap-based buffer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution. CVE-2009-2837 - A memory corruptio...

QuickTime < 7.6.6 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.6. Such versions contain several vulnerabilities : - A memory corruption issue in QuickTime's handling of QDM2 encoded audio content may lead to an application crash or arbitrary code execution. CVE-2010-0059 - A...

CVE-2010-0517

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...

Heap overflow

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...

CVE-2010-0517

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump ======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site...

MASA2EL Music City 1.0 SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My home : Sec-war.com...

MASA2EL Music City 1.0 - SQL Injection

MASA2EL Music City 1.0 - SQL Injection :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1....

Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion

======================================================================================== | Title : Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total aler...

Joomla JM-Recommend Cross Site Scripting

Joomla Component comjm-recommend Cross Site Scripting Vulnerabilities Author : Pyske Name : comjm-recommend Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix...

Joomla Component com_facileforms Cross Site Scripting Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Joomla Component comfacileforms Cross Site Scripting Vulnerabilities ===================================================================== Joomla Component comfacileform...

myPHPupload 0.5.1 - Arbitrary File Upload

myPHPupload 0.5.1 - Arbitrary File Upload | | myPHPupload 0.5.1 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.graphiks.net/telecharger/myPHPupload.zip | | | | Exp : | | 1- Uoload your shell...

Eshopbuilde CMS SQL Injection

================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuild...

Spammer Gets Over 4-Year Sentence

Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. Washington Post...

Unfixed XSS vulnerability at www.tamsayfa.org

Security researcher M-K-A, has submitted on 24/09/2009 a cross-site-scripting XSS vulnerability affecting www.tamsayfa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently...

Unfixed XSS vulnerability at www.guzelonline.org

Security researcher M-K-A, has submitted on 20/09/2009 a cross-site-scripting XSS vulnerability affecting www.guzelonline.org, which at the time of submission ranked 814833 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

CVE-2008-7073 concerns a PHP remote file inclusion in the RSS module 0.1 for Pie Web Maesher. The root cause is that when register_globals is enabled, the lib parameter can be controlled to point to a URL, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability targets...