9615 matches found
CVE-2008-6947
Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via unspecified vectors associated with the added mode in a users action to admin.php...
BofA, Citigroup Warn of Mass. Security Breach
Two of the largest U.S. banks — Bank of America and Citigroup — have issued new credit and debit cards to Massachusetts customers after running into data-safety concerns. Bank of America and Citigroup each recently issued replacement cards to consumers, telling them in letters that their account...
Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
CVE-2009-2145
Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...
CVE-2009-2145
Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...
CVE-2009-2145
Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...
MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->
----------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS = v-2.0 Beta3-- ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.matteoiammarrone.com/public/s-cms/ --DOWNLOAD:...
S-CMS <= 2.0b3 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ===================================================== S-CMS WEB: http://www.matteoiammarrone.com/public/s-cms/ | |--DOWNLOAD: http://www.matteoiammarrone.com/public/s-cms/ | |--DEMO: N/A | |--CATEGORY: CMS / Portal | |--DESCRIPTION: Cms...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...
The Threatpost Daily News Wrap #1
In the first episode of the Threatpost Daily News Wrap podcast, Threatpost editors Ryan Naraine and Dennis Fisher discuss President Obama’s cybersecurity plan and the Microsoft DirectShow vulnerability. Download SHOW NOTES Microsoft warns of dangerous DirectShow flaw, attacks New cybersecurity cz...
When should Microsoft backport security advances?
From PC Mag Larry Seltzer Microsoft has made much of the security advances in their recent products but some people ask why these are not incorporated into their earlier products. The basic answer is that it usually would come at a cost that users aren’t willing to pay in a software patch, but ma...
Identity theft ring busted in New York
From SC Magazine Chuck Miller Using financial information purchased from crooked bank insiders, a ring of thieves compromised the checking accounts of nearly 350 New York-based corporations, religious institutions, hospitals and schools, as well as city and state government agencies, to steal...
Mole Group Sky Hunter/Bus Ticket Scripts Change Admin Pass Exploit
No description provided by source. html head !-- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
MaxCMS 2.0 Create New Admin
?php printr' +---------------------------------------------------------------------------+ maxcms2.0 creat new admin exploit by Securitylab.ir +---------------------------------------------------------------------------+ '; if $argc 3 printr'...
maxcms2.0 creat new admin exploit
?php printr' +---------------------------------------------------------------------------+ maxcms2.0 creat new admin exploit by Securitylab.ir +---------------------------------------------------------------------------+ '; if $argc 3 printr'...
Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload
=-=-Local Directory Traversal/bypass/shell upload/-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::DacioimgGal-v1.6 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...
CVE-2008-6772
login/registerform.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user...
10 Dos and Don'ts for security job interviews
From CIO Joan Goodchild The pickings are slim in the job market and the time line of interviewing and then hiring new people is slow. But there are positions available in the security field, according to three veteran security recruiters that we spoke with recently. If you get a call that you’ve...
Cross site scripting
Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...