iScripts Multicart SQL Injection

Iscripts multicart Multiple vulnerabilities Author : i-Hmx [email protected] sec4ever.com - Vendor have been contacted since 2 years for more than 20 times and he don't give ashit @ all :/ I.Sql Injection Vulns /getProductOptionDetailsAjax.php For Table name Post productoptionid=i-Hmx'/!1337union...

mysql: geometry query crashes mysqld (CPU July 2013)

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service crash via a crafted geometry feature that specifies a large number o...

Backup Copy "Source backup file has different block size."

Challenge The issue described in this KB Article only occurs when a Backup Copy job is using the Periodic copy pruning mode. During consecutive Backup Copy intervals, the same machine or group of machines fails to be processed. The message "Initial copy did not complete, and will resume on the ne...

Dual_EC_DRBG output using untrusted curve constants may be predictable

Overview Output of the Dual Elliptic Curve Deterministic Random Bit Generator DUALECDRBG algorithm may be predictable by an attacker who has chosen elliptic curve parameters in advance. Description NIST SP 800-90A defines three elliptic curves for use in DualECDBRG but does not describe the...

[SECURITY] Fedora 19 Update: systemd-204-15.fc19

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

Linksys EA access points authentication bypass

It's possible to access web administration without authentication...

CVE-2013-3659

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area...

Design/Logic Flaw

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area...

CVE-2013-3659

CVE-2013-3659 affects the NTT DOCOMO overseas usage application for Android (Ver 2.0.0–2.0.4). The vulnerability is in the Wi‑Fi connection process, where improper handling allows an attacker in range of an 802.11 network to obtain user information as the device connects to a Wi‑Fi access point. ...

Fedora Update for kapman FEDORA-2013-13112

Check for the Version of kapman OpenVAS Vulnerability Test Fedora Update for kapman FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 17 Update: ksquares-4.10.5-1.fc17

The idea behind KSquares is to construct squares by interconnecting the dots on the grid. Up to four players can play this game together, taking turns. The trick is =E2=80=93 regardless of who has constructed most of the square, it is the player who completes the square that gets the point for it...

[SECURITY] Fedora 17 Update: kapman-4.10.5-1.fc17

Kapman is a collecting game. You must go through the levels escaping ghosts in a maze. You lose a life when a ghost eats you, but you can eat the ghosts for a few seconds when eating an energizer. You win points when eating pills, energizers, and bonus, and you win one life for each 10,000 points...

[SECURITY] Fedora 18 Update: ksquares-4.10.5-1.fc18

The idea behind KSquares is to construct squares by interconnecting the dots on the grid. Up to four players can play this game together, taking turns. The trick is =E2=80=93 regardless of who has constructed most of the square, it is the player who completes the square that gets the point for it...

[SECURITY] Fedora 18 Update: kjumpingcube-4.10.5-1.fc18

KJumpingCube is a simple tactical game. You can play it against the computer or a friend. The playing area consists of squares containing points. When t he game starts each square has only one point, and no owner. Players move by clicking on either a vacant square or one of their own squares, thu...

Bug Bounty to Reward Researchers with Redeemable Points

IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...

shopex注册用户任意定义预存款余额或积分

简要描述： shopex在注册用户时存在验证不严，导致注册时可以随意定义预存款余额或积分等字段的内容 详细说明： 在文件\core\shop\controller\ctl.passport.php if !$info = $account-create$POST,$message $this-splash'failed','back',$message,'','',$POST'fromminipassport'; 用户注册的变量都保存在$POST中，继续看根目录文件index.php filterData$POST; require...

[SECURITY] Fedora 17 Update: kiriki-4.10.4-1.fc17

Kiriki is an addictive and fun dice game for KDE, designed to be played by as many as six players. Participants have to collect points by rolling five di ce for up to three times per single turn. Each roll generates a specific combination of numbers which the player is free to either accept or...

[SECURITY] Fedora 17 Update: kapman-4.10.4-1.fc17

Kapman is a collecting game. You must go through the levels escaping ghosts in a maze. You lose a life when a ghost eats you, but you can eat the ghosts for a few seconds when eating an energizer. You win points when eating pills, energizers, and bonus, and you win one life for each 10,000 points...

Fedora Update for kjumpingcube FEDORA-2013-10130

Check for the Version of kjumpingcube OpenVAS Vulnerability Test Fedora Update for kjumpingcube FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 18 Update: kiriki-4.10.4-1.fc18

Kiriki is an addictive and fun dice game for KDE, designed to be played by as many as six players. Participants have to collect points by rolling five di ce for up to three times per single turn. Each roll generates a specific combination of numbers which the player is free to either accept or...