2282 matches found
Joomla CB Resume Builder - SQL Injection
No description provided by source. / Joomla Component comcbresumebuilder Remote SQL injection vulnerability - groupid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 5, 2009 Tune In : http://antisecradio.fm choose your weapon / Software Information +...
WordPress Resume Submissions & Job Postings 2.5.1 - Unrestricted File Upload
No description provided by source. Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...
Joomla! CB Resume Builder 'group_id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...
CVE-2014-2005
Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...
CVE-2014-2005: Improper Authentication
Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...
openSUSE Security Update : clutter (openSUSE-SU-2013:1540-1)
clutter was updatd to fix improper translation of hierarchy events gnome-shell crash after system resume CVE-2013-2190, bnc843441. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
[SECURITY] Fedora 19 Update: mingw-curl-7.37.0-1.fc19
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
Updated kernel-tmb packages fix multiple bugs and vulnerabilities
Updated kernel-tmb provides upstream 3.12.20 kernel and fixes the following security issues: Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/ x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that...
74cms 逻辑漏洞导致sql注入
简要描述: 74cms 逻辑漏洞导致sql注入 详细说明: include/funpersonal.php381-398 $j=getresumebasic$uid,$pid; $searchtab'sex'=$j'sex'; $searchtab'nature'=$j'nature'; $searchtab'marriage'=$j'marriage'; $searchtab'experience'=$j'experience'; $searchtab'district'=$j'district'; $searchtab'sdistrict'=$j'sdistrict';...
Updated kernel-rt packages fixes multiple bugs and vulneraabilities
Updated kernel-rt provides upstream 3.12.18 kernel and fixes the following security issues: Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/ x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that trigge...
CVE-2012-0033
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
DEBIAN-CVE-2012-0033
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
Cross site request forgery (csrf)
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
CVE-2012-0033
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
CVE-2012-0033
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
CVE-2012-0033
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
PT-2014-2200
Name of the Vulnerable Software and Affected Versions ZNC versions 0.200 through 0.202 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a crafted DCC RESUME request. This is due to a problem in the CBounceDCCMod::OnPrivCTCP function in t...
CVE-2012-0033: Undefined Security Weakness
The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...
[SECURITY] Fedora 20 Update: imapsync-1.584-2.fc20
imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...
[ProcessThreadsView] View process threads information
ProcessThreadsView is a small utility that displays extensive information about all threads of the process that you choose. The threads information includes the ThreadID, Context Switches Count, Priority, Created Time, User/Kernel Time, Number of Windows, Window Title, Start Address, and more. Wh...