It is possible to access the list of patches in a review and their content by unprivileged users

We've discovered and fixed a security issue, where the attacker could using the REST API: access the list of patches in a review their filename, database id upload date and anchor details without authentication access the patch content for any review as long as he had view access to any other...

Cover Vision - SQL Injection

Exploit Title : Cover Vision Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 13-03-2011 + Software Link: http://unikscripts.com/yaxalproducts.php?display=product&id=66 + category: Web Apps SQli + HomePage : www.Black-hat.cc Vulnerability: SQL injection...

[SECURITY] Fedora 7 Update: qgit-1.5.7-1.fc7

With qgit you are able to browse revisions history, view patch content and changed files, graphically following different development branches...