Elgg 1.7.9 Cross Site Scripting

Elgg 1.7.9 = | Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The Elgg 1.7.9 and lower versions are vulnerable to multiple Cross Site Scripting. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities...

Red Hat Enterprise Linux 5.7 Released

Red Hat Enterprise Linux 5.7 Released Red Hat has updated Enterprise Linux 5.7, which now includes several features from Red Hat Enterprise Linux 6. The operating system processors supports deployments on Intel, AMD, POWER and IBM System z architectures. Highlights of Red Hat Enterprise Linux 5.7...

VirtualBox 4.1 Final for Linux Released

VirtualBox 4.1 Final for Linux Released VirtualBox is a general-purpose full virtualizer for x86 hardware, targeted at server, desktop and embedded use. This version is a major update. The following major new features were added: Support for cloning of VMs bug 5853, see the manual for more...

VirtualBox 4.1 Final for Linux Released

VirtualBox 4.1 Final for Linux Released VirtualBox is a general-purpose full virtualizer for x86 hardware, targeted at server, desktop and embedded use. This version is a major update. The following major new features were added: Support for cloning of VMs bug 5853, see the manual for more...

Anonplus.com (Anonymous Social Networking Site) Hacked by AKINCILAR

Anonplus.com Anonymous Social Networking Site Hacked by AKINCILAR After several members of Anonymous were reportedly banned from Google+ , the hacker group has announced they will be building their own social network called Anonplus.com . Today Anonplus.com Got defaced by AKINCILAR with page titl...

BlueSoft Social Networking CMS SQL Injection Vulnerability

BlueSoft Social Networking CMS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google+ Knows Where You Live!

Much like geolocation services Foursquare, Gowalla and Facebook, Google+ is counting on your desire to share what you’re doing wherever you are. Accordingly, Google+ allows you to geotag content, such as photos, that you upload. This is a great feature. But, as Threatpost has reported, geolocatio...

The Social Networking CMS SQL Injection

Exploit Title: The Social Networking CMS SQL Injection Vulnerability Google Dork: intext:The Social Networking CMS Date: 17/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.shopbluesoft.com/demo Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , Darkknight , Bug Researchers Members...

BlueSoft Social Networking CMS - SQL Injection

source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2011:0938)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0938 advisory. - Oracle/IBM JDK: unspecified vulnerabilities fixed in 6u26 Sound CVE-2011-0802, CVE-2011-0814 - OpenJDK: integer overflows in...

Ubuntu 11.04 : linux vulnerabilities (USN-1167-1)

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Goldwyn Rodrigues discovered that the OCFS2 filesystem did not correctly clear memory when writing certain file...

Rockwell RSLogix Overflow Vulnerability

Overview This updated advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-05A—Rockwell RSLogix Overflow Vulnerability” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of an...

Operations AntiSec : Anonymous takes down Tunisian government site

Operations AntiSec : Anonymous takes down Tunisian government site As LulzSec calling it quits, but the hacking via Operations AntiSec continues. Hacker group Anonymous claimed responsibility of taking down Tunisian government's official website moments ago.The seized domain now displays text...

Ubuntu Update for openjdk-6 USN-1154-1

Ubuntu Update for Linux kernel vulnerabilities USN-1154-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11541.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openjdk-6 USN-1154-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Oracle Java SE Multiple Unspecified Vulnerabilities - June11 (Windows)

This host is installed with Oracle Java SE and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavamultunspecifiedvulnwinjun11.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Unspecified Vulnerabilities - June11 Windows Authors: Sooraj ...

Stack overflow

The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.39 on the x8664 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking AUN packet...

CVE-2011-1173

The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.39 on the x8664 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking AUN packet...

CVE-2011-1173

The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.39 on the x8664 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking AUN packet...

USN-1154-1: OpenJDK 6 vulnerabilities

It was discovered that a heap overflow in the AWT FileDialog.show method could allow an attacker to cause a denial of service through an application crash or possibly execute arbitrary code. CVE-2011-0815 It was dicovered that integer overflows in the JPEGImageReader readImage function and the...

Design/Logic Flaw

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...