OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities Exploit Title: OpenEMR 4.1.1 Patch 14 Multiple Vulnerabilities Date: Sep 17 2013 Exploit Author: xistence Vendor Homepage: www.open-emr.org Tested on: CentOS 5.9 32-bit Affected Version : 4.1.1 Patch 14 and lower Fix: Upgrade to OpenEMR 4.1.2...

[SECURITY] Fedora 17 Update: moodle-2.2.11-1.fc17

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

File vulnerability analysis in the locate the file field method-vulnerability warning-the black bar safety net

Today looking at the snow on the to see someone ask how to control the file format documentation, and debugging the analysis program being parsed is what structure? Here summarizes a few methods, welcome to Supplement, but sometimes still need to rely on experience. a taint tracking analysis: the...

Fedora Update for moodle FEDORA-2013-4387

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-4387 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

PostgreSQL -- anonymous remote access data corruption vulnerability

PostgreSQL project reports: The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. Al...

Fedora Update for moodle FEDORA-2012-18570

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2012-18570 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Novell Groupwise Internet Agent LDAP BIND Request Overflow Vulnerability

Exploit for windows platform in category dos / poc Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-33 ZDI: ?? Novell TID: 5150711 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...

Fedora Update for moodle FEDORA-2012-5286

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2012-5286 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Elastix 2.2.0 Local File Inclusion

!/usr/bin/perl -w ------------------------------------------------------------------------------------ Elastix is an Open Source Sofware to establish Unified Communications. About this concept, Elastix goal is to incorporate all the communication alternatives, available at an enterprise level, in...

Researcher demonstrate hardware based backdoor called Rakshasa

Security researcher Jonathan Brossard created a proof-of-concept hardware backdoor called Rakshasa that replaces a computer's BIOS Basic Input Output System and can compromise the operating system at boot time without leaving traces on the hard drive. In short, firmware is software that is stored...

Fedora Update for openstack-nova FEDORA-2012-10418

Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2012-10418 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CVE-2012-0794

The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of nfgjeingjk, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by reading this script's...

CVE-2012-0794

The CVE-2012-0794 issue affects Moodle 1.9.x up to 1.9.15, 2.0.x up to 2.0.6, 2.1.x up to 2.1.3, and 2.2.x up to 2.2.0, where rc4encrypt in lib/moodlelib.php uses a hardcoded password (nfgjeingjk). This weak cryptographic protection can be defeated by reading the script’s source code within the d...

[SECURITY] Fedora 16 Update: globus-gridftp-server-6.10-2.fc16

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

Pandora Fms 4.0.1 - Local File Inclusion

Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source software. It watches your systems and...

[SECURITY] Fedora 16 Update: openstack-nova-2011.3-13.fc16

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

Open Conference / Journal / Harvester Systems 2.3.x Code Execution

!/usr/bin/python Open Conference/Journal/Harvester Systems = 2.3.X multiple remote code execution vulnerabilities vendor: Public Knowledge Project pkp -http://pkp.sfu.ca/ software link: http://pkp.sfu.ca/download author: mrme::rwx kru email: steventhomasseeley!gmail!com tested on: the interwebz &...

Fedora Update for moodle FEDORA-2011-14733

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2011-14733 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K

Artillery 0.1 alpha - New tool for Linux Protection byReL1K A new Tool "Artillery " - for Linux Protection has been Released by ReL1K Founder DerbyCon, Creator of the Social-Engineer Toolkit. It's written in Python and completely open-source. Artillery is a combination of a honeypot, file...

JXCMS 0day generate the cache file when the variable untreated leads directly write WebShell-vulnerability warning-the black bar safety net

By: anonymous he ID called anonymous, the JXCMS 0day, the JXCMS to generate the cache file when the variable untreated leads directly write the WebShell script vulnerability. Fine fast CMS（Jxcms is based on the use of a network already Mature, stable technology PHP+MYSQL development, the use of...