5714 matches found
BOINC Manager 7.0.64 Buffer Overflow
Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link: http://boinc.berkeley.edu/dl/boinc7.0.64windowsintelx86.exe Version: 7.0.64 for Windows Tested on: Windows XP SP3...
[SECURITY] Fedora 18 Update: rubygem-rdoc-3.12-6.fc18
RDoc produces HTML and command-line documentation for Ruby projects. RDoc includes the +rdoc+ and +ri+ tools for generating and displaying online documentation. See RDoc for a description of RDoc's markup and basic use...
[SECURITY] Fedora 17 Update: rubygem-rdoc-3.12-5.fc17
RDoc produces HTML and command-line documentation for Ruby projects. RDoc includes the +rdoc+ and +ri+ tools for generating and displaying online documentation. See RDoc for a description of RDoc's markup and basic use...
[SECURITY] Fedora 17 Update: xulrunner-19.0.2-1.fc17
XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...
Mudge on the CFT
Peiter Zatko, also known as Mudge, has run the DARPA Cyber Fast Track program for the last three years, but he said that the researcher program is ending on April 1. The CFT program funded a wide range of security research projects in its time, including Charlie Miller’s NFC work and Moxie...
[SECURITY] Fedora 17 Update: xulrunner-19.0-1.fc17
XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...
DARPA Seeks Revolution, Not Evolution, in Cyberspace Capabilities
Defense Advanced Research Projects Agency DARPA, the avant-garde research and development arm of the Department of Defense – perhaps best known for its central role in the development of the Internet – is soliciting research proposals that would help the military improve its cyber battlespace...
'The Hacker News' Celebrating 2nd Birthday
One of the most awaited occasions in a year is your birthday, same way we are today celebrating 'The Hacker News' 2nd Birthday week from on 28th October-3rd November 2012. Originally founded on 1st November 2010 by Mohit Kumar, 'The Hacker News' was the very First dedicated Hacking and Security...
CVE-2011-5187
Cross-site scripting XSS vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors...
WaveMaker Studio Requires No Authentication
The version of WaveMaker Studio detected on the remote host does not require authentication. A remote, unauthenticated attacker could exploit this to create, modify, and deploy projects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Debian DSA-2500-1 : mantis - several vulnerabilities
Several vulnerabilities were discovered in Mantis, an issue tracking system. - CVE-2012-1118 Mantis installation in which the privatebugviewthreshold configuration option has been set to an array value do not properly enforce bug viewing restrictions. - CVE-2012-1119 Copy/clone bug report actions...
Kickstarter Data Breach Publishes 70,000 Startup Ideas
An application programming interface API error on the popular Kickstarter crowdfunding website exposed the plans and descriptions of more than 70,000 yet-to-be launched projects. The API bug exposed project descriptions, goals, durations, rewards, videos, images, locations, categories, and...
Fedora Update for bugzilla FEDORA-2012-6368
Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-6368 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
http-gitweb-projects-enum NSE Script
Retrieves a list of Git projects, owners and descriptions from a gitweb web interface to the Git revision control system. Script Arguments http-gitweb-projects-enum.path specifies the location of gitweb default: / slaxml.debug See the documentation for the slaxml library. http.host,...
Egroupware 1.8.002 Cross Site Scripting
Egroupware v1.8.002 processexec.php Reflected Cross-Site Scripting XSS Google Dork: inurl:etemplate/processexec.php Title: Egroupware v1.8.002 processexec.php Remote XSS Vulnerability Type: Remote Author: Marcos Garcia Severity: Medium CVSS: 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Impact: Direct execution...
Fedora Update for bugzilla FEDORA-2012-0328
Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-0328 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Nullcon GOA 2012 - International Security Conference
Nullcon GOA 2012 - International Security Conference The open security community is a registered non-profit society and by far the largest security community in India with more than 2000 members comprising of information security professionals, ethical hackers and law enforcement professionals...
CVE-2010-4959
SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter...
