Fedora Update for foomatic FEDORA-2011-11118

Check for the Version of foomatic OpenVAS Vulnerability Test Fedora Update for foomatic FEDORA-2011-11118 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

NSA Director Says Agency Should Not Monitor Private Networks

The hysteria in Washington regarding the comprehensive infiltration of U.S. government and civilian networks by China has gotten to the point now that the director of the National Security Agency is saying in open Congressional hearings that his agency, the U.S. Cyber Command and others should be...

PicoPublisher v2.0 Remote SQL injection

Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...

Google Chrome Full Sandbox Escape and Code Execution Vulnerability - Linux

Google Chrome is prone to sandbox escape and code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS via posted select tag options

Ruby on Rails is vulnerable to remote cross-site scripting because the application does not validate manually generated select tag options upon submission to actionpack/lib/actionview/helpers/formoptionshelper.rb. This may allow a user to create a specially crafted request that would execute...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested on: Windows,Linux Add User Username: Password...

NetDecision <= 4.6.1 Multiple Directory Traversal Vulnerabilities - Active Check

NetDecision is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

busybox security and bug fix update

1:1.2.0-13 - Resolves: 768083 'busybox various flaws' including: 'buffer underflow in decompression' 'udhcpc insufficient checking of DHCP options' 1:1.2.0-12 - Resolves: 756723 'Kdump fails after findfs subcommand of busybox fails' 1:1.2.0-11 - Resolves: 689659 ''busybox cp' does not return a...

OpenSSH < 5.7 Multiple Vulnerabilities

Binary data 6300.prm...

CVE-2012-0814

The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...

CVE-2012-0814

The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...

Multiple new vulnerabilities in Register Plus Redux for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...

WinMount 'WMDrive.sys' Driver IOCTL Handling Denial of Service Vulnerability

This host is installed with WinMount and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwinmountdriverioctlhandlingdosvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ WinMount 'WMDrive.sys' Driver IOCTL Handling Denial of Service Vulnerability Authors: Rachana Shetty...

Privilege escalation

The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VxWorks Debugging Service Security Bypass Vulnerability

VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

ClickIt Proof Of Concept

X-Frame-Options is worth less than you think var w; var dummy; var it; // Precache stuff. x = new Image; x.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/'; x2 = new Image; x2.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/beaver-peak.jpg'; x3 = new Image; x3.src...

SuSE 10 Security Update : coreutils (ZYPP Patch Number 7658)

This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. It also fixes a bug : - 702995: Added -L and -P commandline options to...

Low: Red Hat Security Advisory: virt-v2v security and bug fix update

An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...