Security Release: Symfony 2.0.6

Symfony 2.0.6 has just been released. It addresses a security vulnerability in the EntityUserProvider as provided in the Doctrine bridge. If you let your users update their login/username from a form, and if you are using Doctrine as a user provider, then you are vulnerable and you should upgrade...

WordPress Zingiri 2.2.3 Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...

PT-2011-4828

Name of the Vulnerable Software and Affected Versions Dell KACE K2000 System Deployment Appliance affected versions not specified Description The issue concerns a default username and password for the read-only reporting account in the Dell KACE K2000 System Deployment Appliance. This default...

CVE-2011-4048: Undefined Security Weakness

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

Oracle Hyperion Enterprise Performance Management arsqls24.dll缓冲区溢出漏洞

Oracle Hyperion Enterprise Performance Management是性能管理软件。 Oracle Hyperion Enterprise Performance Management在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 在解析数据库连接字符串时，arsqls24.dll中存在边界错误。通过诱使用户打开特制的Hyperion Interactive Reporting Studio .oce文件造成栈缓冲区溢出。 Oracle Hyperion Enterprise Performance Management EPM 11.x 厂商补丁：...

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow (PoC)

Oracle DataDirect ODBC Drivers - HOST Attribute arsqls24.dll Stack Buffer Overflow PoC g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception ha...

Oracle DataDirect ODBC Drivers - HOST Attribute 'arsqls24.dll' Stack Buffer Overflow (PoC)

g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=0000008b ebx=00000000 ecx=00410041 ed...

CVE-2011-1366: Undefined Security Weakness

Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archive...

Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based

Exploit for windows platform in category dos / poc g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception hand...

PT-2011-3086

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise and AppScan Reporting Console versions 5.2 through 7.9.x IBM Rational AppScan Enterprise and AppScan Reporting Console versions 8.x before 8.0.1.1 Description The issue allows remote attackers to execute arbitra...

SonicWALL ViewPoint Server Detection

SonicWALL ViewPoint Server reporting software was detected on the remote host. ViewPoint Server is a Windows-based software application that utilizes a built-in web server to provide reporting functionality for SonicWALL hardware and virtual appliances. C Tenable Network Security, Inc...

OpenVAS - Advanced Open Source vulnerability scanner

OpenVAS - Advanced Open Source vulnerability scanner OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained...

[SECURITY] Fedora 14 Update: bcfg2-1.1.3-1.fc14

Bcfg2 helps system administrators produce a consistent, reproducible, and verifiable description of their environment, and offers visualization and reporting tools to aid in day-to-day administrative tasks. It is the fifth generation of configuration management tools developed in the Mathematics...

Firewall Rule Enumeration

Using the supplied credentials, Nessus was able to get a list of firewall rules from the remote host. Note: The output for this plugin can be very long, and is not shown by default. To display it, enable verbose reporting in scan settings. C Tenable Network Security, Inc. include"compat.inc"; if...

iScanner - Tool to detect and remove malicious codes and web page

iScanner - Tool to detect and remove malicious codes and web page iScanner is a free open source tool lets you detect and remove malicious codes and web page malwares from your website easily and automatically. iScanner will not only show you the infected files in your server but it's also able t...

CVE-2011-3740

FrontAccounting 2.3.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by reporting/includes/fpdi/fpdi2tcpdfbridge.php and certain other files...

PT-2011-4630

Name of the Vulnerable Software and Affected Versions FrontAccounting version 2.3.1 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "reporting/includes/fpdi/fpdi2tcpdf...

Blue Coat Reporter Unauthenticated Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Blue Coat Reporter Unauthenticated Directory Traversal Author: nitr0us / http://twitter.com/nitr0usmx Software Link: http://www.bluecoat.com/products/reporter Version: 9.2.x - 9.1.x Tested on: Windows Server 2003 Standard Bl...

Fedora Update for bcfg2 FEDORA-2011-12303

Check for the Version of bcfg2 OpenVAS Vulnerability Test Fedora Update for bcfg2 FEDORA-2011-12303 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...