Fedora 18 : mod_security-2.7.1-3.fc18 / mod_security_crs-2.2.6-3.fc18 (2012-18278)

Update to 2.7.1 - Update Core rules set to 2.2.6 - Fix build against libxml2 = 2.9 upstreamed - Add some missing directives RHBZ 569360 - Fix multipart/invalid part ruleset bypass issue CVE-2012-4528 RHBZ 867424, 867773, 867774 Note that Tenable Network Security has extracted the preceding...

Fedora Update for mod_security FEDORA-2012-9824

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mod_security FEDORA-2012-9824

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2012-9824 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 17 Update: mod_security_crs-2.2.5-1.fc17

This package provides the base rules for modsecurity...

Apache mod_security protection bypass

It's possible to bypass protection if both Content-Disposition: attachment and Content-Type: multipart are present...

SN News 1.2 SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

SN News (visualiza.php) <= 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications \n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; ech...

Mnews 1.1 - 'view.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

Mnews 1.1 SQL injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

mod_security 2.6.5 for Apache 2.2.x & 2.4.1 Released SQL injection bypass

Exploit for php platform in category web applications ----------------------------------------------------------------- Exploit Title: modsecurity 2.6.5 SQL injection bypass Date: 21/04/2012 Author: Phizo Greetz: Inj3ct0r Exploit DataBase 1337day.com Software Link: http://www.modsecurity.org/...

Fedora 16 : cacti-0.8.7i-2.fc16 (2011-17015)

Update to 0.8.7i. Upstream release notes are at http://www.cacti.net/releasenotes087i.php. Notably 'Multiple security vulnerabilities'. Also, adjust modsecurity settings. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 15 : cacti-0.8.7i-2.fc15 (2011-17049)

Update to 0.8.7i. Upstream release notes are at http://www.cacti.net/releasenotes087i.php. Notably 'Multiple security vulnerabilities'. Also, adjust modsecurity settings. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Remote Code Execution in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote Code Execution. Component Type: TYPO3 Core Affected Versions: 4.5.0 up to 4.5.8, 4.6.0 and 4.6.1 + development releases of 4.7 branch Vulnerability Types: Remote Code Execution Overall Severity: Critical Release Date: December 16, 201...

Apache Reverse Proxy Bypass Vulnerability Scanner

Scan for poorly configured reverse proxy servers. By default, this module attempts to force the server to make a request with an invalid domain name. Then, if the bypass is successful, the server will look it up and of course fail, then responding with a status code 502. A baseline status code is...

Cpanel PHP Restriction Bypass Vulnerability 0day

Exploit for php platform in category web applications ================================================ Cpanel PHP Restriction Bypass Vulnerability 0day ================================================ 1 Advisory information Title : Cpanel PHP Restriction Bypass Vulnerability Version : = 11.25...

Fedora 12 : mod_security-2.5.12-1.fc12 (2010-1903)

SECURITY: This release fixes several issues including potential rule bypass and Denial of Service attacks. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 11 : mod_security-2.5.12-1.fc11 (2010-1862)

SECURITY: This release fixes several issues including potential rule bypass and Denial of Service attacks. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Vulnerability in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution. Component Type: TYPO3 Core Affected Versions: 4.3.0, 4.3.1 and 4.3.2 + development releases of 4.4 branch Vulnerability Types: Remote Command Execution Overall Severity: Critical Release Date: April 9, 2010 Vulnerab...

Fedora Update for mod_security FEDORA-2010-1862

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2010-1862 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for mod_security FEDORA-2010-1903

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...