8371 matches found
[SECURITY] Fedora 8 Update: xine-lib-1.1.10.1-1.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
wpmu-exec.txt
Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy class SnoopyExt extends Snoopy function...
WordPress MU < 1.3.2 - 'active_plugins' Code Execution
Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy class SnoopyExt extends Snoopy function...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins optio...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
No description provided by source. ?php / WordPress MU blog's options overwrite Credits : Alexander Concha alex at buayacorp dot com Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to...
Debian DSA-1473-1 : scponly - design flaw
Joachim Breitner discovered that Subversion support in scponly is inherently insecure, allowing execution of arbitrary commands. Further investigation showed that rsync and Unison support suffer from similar issues. This set of issues has been assigned CVE-2007-6350. In addition, it was discovere...
Debian Security Advisory DSA 168-1 (PHP3, PHP4)
The remote host is missing an update to PHP3, PHP4 announced via advisory DSA 168-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Debian: Security Advisory (DSA-1237-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 8 Update: xine-lib-1.1.9.1-1.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
Docebo 3.5.0.3 - lib.regset.phpnon-blind SQL Injection
Docebo 3.5.0.3 - lib.regset.phpnon-blind SQL Injection = 4.1 PHP 5.X needed by Docebo regardless of php.ini settings no benchmark quickly coded to perform credentials disclosure ----------------------------------------------------------------------------- '; if $argc 126 $result.=" ."; else...
CVE-2008-0205
Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...
UploadImageUploadScript 1.0 - Remote Change Admin Password
UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...
Seattle Lab telnet Server DoS
NULL pointer dereference on telnet options parsing...
Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service
source: https://www.securityfocus.com/bid/27143/info Pragma TelnetServer is prone to a denial-of-service vulnerability because it fails to adequately handle certain telnet options. Attackers can leverage this issue to terminate the server and cause denial-of-service conditions. This issue affects...
CVE-2007-6550
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter...
Fedora 7 : autofs-5.0.1-31 (2007-4709)
Fri Dec 21 2007 Ian Kent - 5.0.1-31 - Bug 426399: CVE-2007-6285 autofs default doesn't set nodev in /net f7 - use mount option 'nodev' for '-hosts' map unless 'dev' is explicily specified. - Tue Dec 18 2007 Ian Kent - 5.0.1-30 - Bug 397591 SELinux is preventing /sbin/rpc.statd rpcdt 'search' to...
CentOS 4 : autofs5 (CESA-2007:1177)
Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...
FreeWebShop 2.2.1 - Blind SQL Injection
FreeWebShop 2.2.1 - Blind SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop version 2.2.1 - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 16 2007 01:50AM Software : FreeWebshop version 2.2.1 Vendor :...
Important: autofs5 security update
5.0.1-0.rc2.55.el46.1 - Bug 412621: CVE-2007-5964 autofs defaults don't restrict suid in /net - use mount option nosuid for -hosts map unless suid is explicily specified. - Resolves: rhbz412621...
MoBiC-28 Bonus: XSS in Cryptographp
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в капче Cryptographp. Это капча плагин для WordPress. Всего 24 XSS уязвимости на странице опций плагина http://site/wp-admin/options-general.php?page=cryptographp/admin.php. Причём это persistent XSS уязвимости. XS...