Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Joomla rsmonials Cross Site Scripting

/ RSMonials XSS Exploit http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component Google Dork: allinurl:option=comrsmonials Anything entered into the form gets rendered as HTML, so you can add tags as long as they don't include quotes magic...

cpuapr2009.html

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

MS09-016: Description of the ISA Server 2006 hotfix package: April 14, 2009

Resolves vulnerabilities that may cause ISA Server 2006 stop accepting new requests.INTRODUCTIONMicrosoft has released security bulletin MS09-016. To view the complete security bulletin, visit one of the following Microsoft Web sites:Home...

Mandriva Update for libgnomeui2 MDVA-2008:100 (libgnomeui2)

Check for the Version of libgnomeui2 OpenVAS Vulnerability Test Mandriva Update for libgnomeui2 MDVA-2008:100 libgnomeui2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for timezone MDKA-2007:018-1 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDKA-2007:018-1 timezone Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for clamav MDKSA-2007:098 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:098 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for clamav MDKSA-2007:098 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:098 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for draksnapshot MDVA-2008:135-1 (draksnapshot)

Check for the Version of draksnapshot OpenVAS Vulnerability Test Mandriva Update for draksnapshot MDVA-2008:135-1 draksnapshot Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Mandriva Update for libgnomeui2 MDVA-2008:100 (libgnomeui2)

Check for the Version of libgnomeui2 OpenVAS Vulnerability Test Mandriva Update for libgnomeui2 MDVA-2008:100 libgnomeui2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2008-6631

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

Adam Shostack on the Science of Security and Value of Thinking Differently

Dennis Fisher talks to Adam Shostack of Microsoft, about the evolution of thinking around “The New School of Information Security,” his new group blog and what surprised him most when he went to work at Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of...

Ori Eisen on Credit Card Fraud and the Need for a New Internet

Dennis Fisher talks with Ori Eisen, founder of 41st Parameter, about the roots of online fraud, how the credit card companies and banks could have done better and whether we need to start from scratch with a new Internet. Subscribe to the Digital Underground podcast on Podcast audio courtesy of...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

CVE-2008-6585

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

Podcast Generator 1.1 - Remote Code Execution

!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...

VulnCheck KEV: CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control aka Sky Software "FileView" ActiveX control for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198...

Southwest Airlines site in Conficker's crosshairs

The resilient Conficker worm has spent the last few months wreaking havoc on millions of infected PCs around the world, and it now looks like the worm is set to potentially cause some trouble for Southwest Airlines as well. Computerworld is reporting that the infected machines will attempt to...