9607 matches found
53 Charged in New Jersey ID Theft Case
Fifty-three individuals were charged today in connection with widespread, sophisticated identity theft and fraud, including 43 individuals charged with participating in one large-scale criminal enterprise, United States Attorney Paul J. Fishman and FBI Special Agent in Charge Michael B. Ward...
win32/xp sp3 (Tr) Create New File (zrl.txt) 74 bytes
Exploit for win32 platform in category shellcode...
Botnet-For-Hire Model Resurfaces in New IMDDOS Botnet
Researchers have identified a new botnet based in China that was openly selling DDoS-for-hire services and had managed to plant roots inside a number of major U.S. ISPs. The botnet, known as IMDDOS, is mostly contained right now and the researchers are working with authorities to locate its...
Fedora 13 : sudo-1.7.4p4-1.fc13 (2010-14355)
update to new upstream version - sudo now uses /var/db/sudo for timestamps - new command available: sudoreplay - use native audit support - corrected license field value: BSD - ISC - added envkeep += HOME see rhbz614025 for backwards compatibility - added Defaults !visiblepw - fixes CVE-2010-2956...
Unfixed XSS vulnerability at shwephonecard.com
Security researcher PlanetCreator, has submitted on 26/08/2010 a cross-site-scripting XSS vulnerability affecting shwephonecard.com, which at the time of submission ranked 2724857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It i...
OpenSSH 5.6 Updates Authentication Bugs
According to the developers, the latest release of the free SSH connectivity tools include a number of bug fixes and several new features. Read the full article. The H Security...
Pimcore 1.1.0 Cross Site Scripting
Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...
XSS vulnerability in pimcore
Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...
MYBB 1.6 (admin/index.php) XSS Vulnerabilities
Exploit for php platform in category web applications ============================================== MYBB 1.6 admin/index.php XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities
Insomnia Security Vulnerability Advisory: ISVA-100730.1 Name: EasyManage CMS Multiple SQL injection Vulnerabilities Released: 30 July 2010 Vendor Link: http://www.face.co.nz/easymanage Affected Products: Easy Manage CMS Original Advisory: http://www.insomniasec.com/advisories/ISVA-100730.1.htm...
MDVA-2009:271 : k3b
Mandriva 2010 includes k3b 1.68 alpha3 and the stable release won't be ready before a long time, this update introduces the Aplha4 version, with lot's of bugfixes and some new features including: New features Added close buttons on project tabs 159751 Added support for new libmpcdec API 214149...
MDVA-2009:063 : mdkonline
This update fixes several issues with mdkapplet. On 2009.1 PowerPack, mdkonline wrongly set up the 2009.0 restricted media instead of the 2009.1 ones 50478. Mdkapplet checks once a day if a new distribution is availlable. When checking again for updates every 3 hoours by default, mdkapplet forgot...
MDVA-2009:224 : mandriva-kde4-config
This package adds new top bar for Mandriva Flash 2010 edition. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...
Max CMS2. 0beta (maxcms)SQL injection and administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net
This system was internally very popular video-on-demand system, before 1. 5 version vulnerability very much, the 2.0 version in terms of security has improved, but still there are loopholes exist. Look at the code \inc\ajax. asp dim action : action = getForm"action", "get" response. Charset="gbk"...
CVE-2010-2718
Multiple cross-site scripting XSS vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 txtusername parameter to login.php, 2 todo parameter to newtodo.php, and unspecified vectors to 3 newtelephone.php and 4...
chillyCMS 1.1.3 Cross Site Request Forgery
input type="hidden...
CVE-2010-2697
Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...
CVE-2009-4930: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the twbkwbis.PSecurityQuestion aka Change Security Question page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web script or HTML via the New Question field...
Sijio Community Software SQL Injection/Persistent XSS Vulnerability
Exploit for php platform in category web applications =================================================================== Sijio Community Software SQL Injection/Persistent XSS Vulnerability ===================================================================...