Unfixed XSS vulnerability at www.kamstra-travel.eu

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.kamstra-travel.eu, which at the time of submission ranked 7345207 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.geo.lemarx.eu

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.geo.lemarx.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.gnresound.se

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.gnresound.se, which at the time of submission ranked 13932353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.upcode.fi

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.upcode.fi, which at the time of submission ranked 792945 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at imobile.us

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting imobile.us, which at the time of submission ranked 1049591 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.domanregister.se

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.domanregister.se, which at the time of submission ranked 2005460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at wap.nettavisen.no

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting wap.nettavisen.no, which at the time of submission ranked 5496 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed XSS vulnerability at www.vildawebben.se

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.vildawebben.se, which at the time of submission ranked 322758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die

Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service master process outage by simultaneously disconnecting many 1 IMAP or 2 POP3 sessions...

Citrix Provisioning Services streamprocess.exe Stack Buffer Overflow

Citrix Provisioning Service allows computers to obtain application from the network in real-time. Administrators can prepare a master device for imaging purposes by creating a vDisk image that would be stored on a Provisioning Server. Then, this vDisk would be used by devices to boot directly fro...

November, 2010: PS3 Master Key Hacked Retweeted – by Sony

Maybe the only thing worse than having the master key to your company’s incredibly valuable video gaming platform published online by a brilliant and iconoclastic hacker is having the social networking account for the fictitious TV personality your company spent millions of dollars creating forwa...

November, 2010: PS3 Master Key Hacked, Leaked

Like most game and console vendors, Sony fights a never-ending battle for control of its own platform against a shadowy community of hacker enthusiasts and modders who want to exploit Sony’s hardware for all its worth. It’s a near-constant cat and mouse game, which made the 2010 hack of the...

LastPass Forces Users to Change Master Passwords Following Suspicious Activity

LastPass, one of the most popular cloud-based password management services, is forcing users to change their master passwords as a precaution after it discovered an unauthorized data transfer out of its network. In a post on its blog the company explains, in sufficient detail, what prompted this...

1024cms ACP 1.1.0 Master-cPanel Local File Inclusion

========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...

Mandriva Update for openldap MDVSA-2011:055 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2011:055 openldap Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2011:055 ] openldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:055 http://www.mandriva.com/security/ Package : openldap Date : March 30, 2011 Affected: 2009.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been identified and fixed in openldap:...

Mandriva Linux Security Advisory : openldap (MDVSA-2011:055)

Multiple vulnerabilities has been identified and fixed in openldap : chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

Saltstack Minion Payload Deployer

This exploit module uses saltstack salt to deploy a payload and run it on all targets which have been selected default all. Currently only works against nix targets. Module Options msf use exploit/linux/local/saltstack/saltminiondeployer msf undefinedsaltminiondeployer show actions ...actions...