Debian Security Advisory DSA 2828-1 (drupal6 - several vulnerabilities)

Multiple vulnerabilities have been discovered in Drupal, a fully-featured content management framework: vulnerabilities due to optimistic cross-site request forgery protection, insecure pseudo random number generation, code execution and incorrect security token validation. In order to avoid the...

appRain CMF Arbitrary PHP File Upload (CVE-2012-1153)

An arbitrary file upload vulnerability has been reported in appRain's Content Management Framework...

Drupal Stage File Proxy模块拒绝服务漏洞

Bugtraq ID:61080 Drupal是使用PHP语言编写的开源内容管理框架，它由内容管理系统和PHP开发框架共同构成 Drupal Stage File Proxy模块存在一个拒绝服务漏洞，允许攻击者长时间重复向服务器提交多次请求，会降低所有文件操作的性能，也可能使得某些文件操作不能使用，造成拒绝服务攻击 0 Drupal Stage File Proxy 7.x-1.x 厂商解决方案 Drupal Stage File Proxy 7.x-1.4已经修复此漏洞，建议用户下载更新： http://drupal.org/project/stagefileproxy...

TYPO3 Maag Form Captcha开放重定向漏洞

BUGTRAQ ID: 60298 CVECAN ID: CVE-2013-4680 Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 TYPO3的Maag Form Captcha 2.0.0及更早版本存在开放重定向漏洞，攻击者利用此漏洞可将用户重定向到任意网站并执行钓鱼攻击。 0 TYPO3 Maag Form Captcha = 2.0.0 厂商补丁： TYPO3 ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://typo3.org/extensions/repository/...

Drupal Login安全模块安全绕过漏洞

Bugtraq ID:60683 Drupal是一个基于PHP语言编写的开发型CMF（内容管理框架），Drupal Login Security是一个用于Drupal的登录安全模块 Drupal Login Security模块在禁用'soft blocking'时存在安全漏洞，由于模块不正确使用字符串过滤，可导致模块忽略所有检查 0 Drupal Login Security 6.x-1.x Drupal Login Security 7.x-1.x 厂商解决方案 Drupal Login Security 6.x-1.3和7.x-1.3已经修复此漏洞，建议用户下载更新：...

appRain CMF Arbitrary PHP File Upload Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "appRain CMF...

appRain CMF Arbitrary PHP File Upload Vulnerability

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

[SECURITY] [DSA 2445-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2445-1 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...

IBM Tivoli Management Framework Endpoint addr URL Default Credentials

The remote Tivoli Endpoint installation is secured by default credentials. Nessus is able to make authenticated requests to '/addr' by using the username 'tivoli' and password 'boss', which are hard-coded in the server executable. A remote, unauthenticated attacker could change the endpoint's...

CVE-2011-2330

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than...

CVE-2011-1220

Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field...

Code injection

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than...

CVE-2011-1220

CVE-2011-1220 : IBM Tivoli Endpoint Manager (Tivoli Management Framework) is affected via a stack-based buffer overflow in the lcfd.exe component when processing long POST query arguments. A remote authenticated attacker could execute arbitrary code. Affected versions include Tivoli Endpoint Mana...

CVE-2011-1220

Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field...

CVE-2011-2330

CVE-2011-1220 affects IBM Tivoli Endpoint Manager / Tivoli Management Framework (versions 3.7.1, 4.1, 4.1.1, 4.3.1). It is a stack-based buffer overflow in lcfd.exe that allows remote authenticated users to execute arbitrary code via a long opts field. This CVE is part of the broader CVE-2011-233...

CVE-2011-2330: Undefined Security Weakness

Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP port 9495, a different vulnerability than...

PT-2011-3778

Name of the Vulnerable Software and Affected Versions IBM Tivoli Management Framework versions 3.7.1, 4.1, 4.1.1, and 4.3.1 Description The issue concerns an unspecified built-in account in Tivoli Endpoint that can be trivially accessed. This makes it easier for remote attackers to send requests ...

CVE-2011-1220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field...

PT-2011-2958

Name of the Vulnerable Software and Affected Versions IBM Tivoli Management Framework versions 3.7.1, 4.1, 4.1.1, and 4.3.1 Description The issue is related to a stack-based buffer overflow in the lcfd.exe component of IBM Tivoli Endpoint, which allows remote authenticated users to execute...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability ===================================================================== getObject'modUser',array 30: 'use...