CVE-2011-3195

shared/inc/sql/lists.php in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options...

CVE-2011-3195

shared/inc/sql/lists.php in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options...

Full Disclosure Security Mailing List Shuts Down

The Full Disclosure security mailing list, which has been one of the main discussion forums for vulnerability and exploit information for 12 years, is shutting down because “‘one of our own’ would undermine the efforts of the last 12 years”, one of the creators said. John Cartwright, one of the...

[SECURITY] [DSA 2853-1] horde3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2853-1 [email protected] http://www.debian.org/security/ Luciano Bello February 05, 2014 http://www.debian.org/security/faq -...

Cross-Site Request Forgery Protection in TYPO3 CMS 6.2

TYPO3 CMS 6.2 will get CSRF Protection throughout all modules and parts that manipulate data. Component Type: TYPO3 CMS Vulnerability Types: Cross-Site Request Forgery CSRF Overall Severity: Low Release Date: January 31, 2014 Affected Versions: All versions below 6.2 CVE: Will be requested. Probl...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2771-1] nas security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

It has been discovered that the extension "RealURL: speaking paths for TYPO3" realurl is vulnerable to SQL-Injection. Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below...

Vulnerabilities in Avaya IP Office Customer Call Reporter

Hello 3APA3A! I want to warn you about vulnerabilities in Avaya IP Office Customer Call Reporter. These are Remote HTML Include and Remote XSS Include Cross-Site Scripting vulnerabilities. After I found multiple vulnerabilities in Avaya IP Office Customer Call Reporter in December, I informed ZDI...

Avaya IP Office Customer Call Reporter 8.0.9.13 XSS

Hello list! I want to warn you about vulnerabilities in Avaya IP Office Customer Call Reporter. These are Remote HTML Include and Remote XSS Include Cross-Site Scripting vulnerabilities. After I found multiple vulnerabilities in Avaya IP Office Customer Call Reporter in December, I informed ZDI...

Apple Store Vulnerable to XSS

There is a cross-site scripting vulnerability in the Apple Store Web site that is exposing visitors to potential attack. The vulnerability was discovered by a German security researcher who says he informed Apple about the problem in mid-May, but the vulnerability still exists. The XSS...

Security Bypass Vulnerability in extension powermail (powermail)

It has been discovered that the extension "powermail" powermail is susceptible to Security Bypass Vulnerability. Release Date: June 03, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.9 and below, 2.0.1 -...

[SECURITY] [DSA 2683-1] libxi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

The copper plate while the net mass mailing statistics system v1. 2 vulnerability-vulnerability warning-the black bar safety net

'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenlei Order by id Desc" Rs. Op...

[SECURITY] [DSA 2636-2] xen regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2636-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2612-1] ircd-ratbox security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2612-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 24, 2013 http://www.debian.org/security/faq -...

Sensitive information of 1 Million people breached at Nationwide Insurance

Nationwide Insurance was breached last week and Sensitive information of about 1 Million people is at risk. The FBI is investigating a breach, including policy and non-policy holders. Nationwide mailed notices to all affected individuals last Friday. Insurance Commissioner Ralph Hudgens issued th...

[SECURITY] [DSA 2575-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2575-1 [email protected] http://www.debian.org/security/ Nico Golde November 18, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2542-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2542-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 08, 2012 http://www.debian.org/security/faq -...

Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

It has been discovered that the extension "powermail" powermail is vulnerable to Cross-Site Scripting, SQL Injection and Arbitrary Code Execution. Release Date: August 8, 2012 Bulletin update: August 9, 2012 added update help for extension manager, added further download link Component Type: Thir...