CVE-2010-4959

CVE-2010-4959 describes an SQL injection vulnerability in the login feature of Pre Projects Pre Podcast Portal. The root cause is unsafely constructed SQL in the password parameter, enabling remote attackers to inject arbitrary SQL commands. Documents consistently identify the affected component ...

Behind the Scenes of The Crypto Project

When a small group of activists announced the debut of The Crypto Project earlier this year, for many, ahem, mature, security and privacy advocates it brought to mind memories of the original cypherpunk movement that began in the 1990s and that group’s seminal efforts to encourage the use of stro...

India - US sign Cyber Shield deal

India - US sign Cyber Shield deal India and the US on Tuesday inked a pact on cybersecurity to intensify information exchange on threats to computers and networks and initiate joint work on technologies against cyber-attacks. A joint statement on the India-US strategic dialogue has announced the...

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

CVE-2011-1721

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

dotproject 2.1.5 Xss / Sql Injection Vulnerabilities

Exploit for php platform in category web applications author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2 ./dotproject/fileviewer.php:127 dbloadHash'SELECT FROM dotpfiles WHERE fileid ...

HOLD — HBGary Federal News…

HBGary Federal, the beleagured security startup that has been the target of the online mischief making group Anonymous for the last week said on Monday that it was ceasing operations | its CEO Aaron Barr was stepping down. The consulting firm, a wholly owned subsidiary of HBGary Inc., had been...

Fedora Update for bugzilla FEDORA-2011-0755

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2011-0755 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Savannah GNU Site Compromised

A site belonging to the Savannah GNU free software archive was attacked recently, leading to a compromise of encrypted passwords and enabling the attackers to access restricted project material. The compromise was the result of a SQL injection attack against the savannah.gnu.org site within the...

Mainely Newspaper CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================== Mainely Newspaper CMS Persistent XSS Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

[SECURITY] Fedora 13 Update: bugzilla-3.4.8-2.fc13

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Drupal Storm 1.32 Cross Site Scripting

Drupal Storm module is a CRM type module that allows you to make orgs, people, tasks, and project. It is used on thousands of sites according to http://drupal.org/project/usage/storm. Storm version 1.32 have a lots of cross site scripting vulns. Sploits - Make or view a Storm organization at...

Scratcher - SQL Injection Cross-Site Scripting

Scratcher - SQL Injection Cross-Site Scripting + Scratcher SQL/XSS Multiple Remote Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0...

Fedora Update for trac FEDORA-2010-4287

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2010-4287 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for trac FEDORA-2010-4318

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2010-4318 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Joomla JP Jobs SQL Injection

Exploit Title: Joomla component jpjobs SQL Injection vulnerability Date: 03.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product...

Joomla! Component JP Jobs 1.4.1 - SQL Injection

Joomla! Component JP Jobs 1.4.1 - SQL Injection :: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = jpjobs :: Vendor = Joomla! Projects :: Vendor Website = http://www.joomlanetprojects.com/ ::...

Joomla! Component JP Jobs 1.4.1 - SQL Injection

:: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = jpjobs :: Vendor = Joomla! Projects :: Vendor Website = http://www.joomlanetprojects.com/ :: About the product =...

[SECURITY] Fedora 13 Update: trac-0.11.7-1.fc13

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...

[SECURITY] Fedora 12 Update: trac-0.11.7-1.fc12

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...