Castor Library - XML External Entity Information Disclosure

Castor Library - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/67676/info Castor Library is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Caster...

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...

Plogger 1.0 RC1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...

Plogger 1.0 (RC1) - Multiple Vulnerabilities

Plogger 1.0 RC1 - Multiple Vulnerabilities Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apach...

Plogger 1.0 (RC1) - Multiple Vulnerabilities

Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...

[SECURITY] Fedora 19 Update: libgadu-1.12.0-0.2.rc1.fc19

libgadu is intended to make it easy to add Gadu-Gadu communication support to your software...

Fedora 19 : libgadu-1.12.0-0.2.rc1.fc19 (2013-23517)

From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...

Fedora 19 : drupal7-context-3.1-1.fc19 (2013-20965)

Update to upstream 3.1 release for bug fixes - Upstream changelog for this release: https://drupal.org/node/2113785 - Fixes CVE-2013-4445, CVE-2013-4446 BZ 1020777, BZ 1020262, BZ 1020781, BZ 1020784 Upstream updated to rc1 Note that Tenable Network Security has extracted the preceding...

Design/Logic Flaw

The sendfile system-call implementation in sys/kern/uipcsyscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to obtain sensitive information kernel memory via a length greater than the length of the file...

PloggerGallery 1.0 RC1 CSRF / XSS / SQL Injection Vulnerabilities

PloggerGallery version 1.0 RC1 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 RC1 Author : Saadat Ullah Date : 2/3/13 Dork : Us...

PloggerGallery 1.0 RC1 CSRF / XSS / SQL Injection

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 RC1 Author : Saadat Ullah Date : 2/3/13 Dork : Use Ur Mind Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +--...

Simple Webserver 2.3-rc1 Directory Traversal Vulnerability

Exploit for windows platform in category web applications Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal Date: 01/02/2013 Exploit Author: CwG GeNiuS Vendor Homepage: http://www.pmx.it Software Link: http://www.pmx.it/download/sws-2.3-rc1-i686.exe Version: 2.3-rc1 and earlier Tested o...

phpMyChat Plus 1.94 RC1 - Multiple Vulnerabilities

phpMyChat Plus 1.94 RC1 - Multiple Vulnerabilities Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Lin...

phpMyChat Plus 1.94 RC1 - Multiple Vulnerabilities

Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Link:...

PHP < 5.3.11, 5.4.0 < 5.4.1 RC1 HTTP Header Injection Vulnerability

PHP is prone to an HTTP header injection vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PT-2012-4796 · Openstack · Openstack Keystone +1

Name of the Vulnerable Software and Affected Versions: OpenStack Keystone versions prior to folsom-rc1 OpenStack Essex 2012.1 Description: The issue allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API...

Plogger 1.0 RC1 Cross Site Scripting

HTTPCS Advisory : HTTPCS83 Product : Plogger Version : 1.0 RC1 Date : 2012-08-28 Criticality level : Less Critical Description : A vulnerability has been discovered in Plogger, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'sortby'...

ProjectCMS XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Hastymail 2.1.1 RC1 Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Hastymail 2.1.1 R...

[SECURITY] Fedora 16 Update: bind-dyndb-ldap-1.1.0-0.11.rc1.fc16

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...