CVE-2013-0233

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass...

SourceForge Detects Targeted Attack, Resets Millions of Passwords !

Last week, accessible antecedent computer application development and administration ability SourceForge the ambition of a directed attack. Once the advance was detected, the aggregation bound bottom ward the impacted hosts to abate the accident of accretion to added hosts. Thus, this prevented...

Ubuntu Update for eucalyptus vulnerability USN-1033-1

Ubuntu Update for Linux kernel vulnerabilities USN-1033-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10331.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for eucalyptus vulnerability USN-1033-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Nagios XI - Multiple Cross-Site Request Forgery Vulnerabilities

Nagios XI - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/42322/info Nagios XI is prone to multiple cross-site request-forgery vulnerabilities because the application fails to properly validate HTTP requests. Successful exploit requires that the...

Ubuntu 7.10 / 8.04 LTS / 8.10 : linux, linux-source-2.6.22 vulnerabilities (USN-751-1)

NFS did not correctly handle races between fcntl and interrupts. A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service. Ubuntu 8.10 was not affected. CVE-2008-4307 Sparc syscalls did not correctly check mmap regions. A local attacker could cause a...

FreeBSD : joomla -- flaw in the reset token validation (8514b6e7-6f0f-11dd-b3db-001c2514716c)

Joomla project reports : A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user lowest id. Typically, this is an administrator user. Note, that changing the...

ICMP and TCP timestamp attacks to reset TCP connections

By using different ICMP packet types and TCP timestamps values it's possible to cause TCP connection resets or performance decrease...