[SECURITY] [DLA 179-1] tzdata new upstream version

Package : tzdata Version : 2015b-0squeeze1 Upstream published version 2015b. Changes since 2014h-0squeeze1 currently in squeeze-lts are the following: - New leap second 2015-06-30 23:59:60 UTC. - New DST for Mongolia. - New DST for Palestine. - New DST for Cancun Mexico. - New DST for Chile. - Ne...

DLA-179-1 tzdata - new upstream version

Bulletin has no description...

kernel update for Evergreen 11.4, includes leap second deadlock fix (important)

kernel update for Evergreen 11.4, includes leap second deadlock fix and fixes for other security and stability issues...

XDcms订餐网站系统单店版注入(demo测试)

简要描述： rt 详细说明： 黑盒demo测试 首先注册一个用户，然后修改用户资料 http://dd.xdcms.cn/index.php?m=member&f=edit 修改完成之后，下单点餐。 然后报错了。二次注入 由于demo有安全狗，就没用深入测试了。 漏洞证明：...

e2fsprogs Local Buffer Overflow Vulnerability

e2fsprogs Ext2 Filesystem Utilities is a set of disk utilities for the EXT2 filesystem. A local buffer overflow vulnerability exists in e2fsprogs, which can be exploited by an attacker to execute arbitrary code in an affected application...

Mozilla: Use-after-free during HTML5 parsing (MFSA 2014-87)

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document duri...

Mozilla: Use-after-free during HTML5 parsing (MFSA 2014-87)

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document duri...

UBUNTU-CVE-2014-1592

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document duri...

74cms(20141027)多处二次注入

简要描述： 看完了xfkxfk大神的 http://wooyun.org/bugs/wooyun-2010-070827 http://wooyun.org/bugs/wooyun-2014-070858 对74cms尝试了下，果然有收货。 详细说明： 1. user/company/companyajax.php elseif$act=="promotionaddsave" reportdeal$uid,2,$points; $userpoints=getuserpoints$uid;...

Advance Notification Service for the October 2014 Security Bulletin Release

Today, we provide advance notification for the release of nine Security Bulletins. Three of these updates are rated Critical, five are rated as Important, and one is rated Moderate in severity. These updates are for Microsoft Windows, Internet Explorer, Office, .NET Framework, and ASP.NET. As per...

DEBIAN-CVE-2014-3657

The virDomainListPopulate function in conf/domainconf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service deadlock via a NULL value in the second parameter in the virConnectListAllDomains API command...

Hdwiki最新版二次注入一枚

简要描述： 上Hdwiki官网 发现更新日期一直都没变。 还以为一直都没更新了, 结果今天下载一个下来看看。 发现之前发的洞竟然都补掉了。 非盲注 直接出数据。 ps. 更新程序了应该还是把日期更新了一下 要不别人会一直以为没更新的。 详细说明： 在user/pms.php中 function doblacklist ifisset$this-post'blacklist' $blacklist = htmlspecialcharsstring::stripscript$this-post'blacklist'; ifempty$blacklist $result =...

TinyShop二次注入一枚。

简要描述： rt TinyShop v1.0.2 详细说明： 还是 protected\controllers\simple.php文件 public function orderact ................. $address = $model-table"address"-where"id=$addressid"-find; //if!$address$this-redirect"order",false,Req::args; //if!$paymentid$this-redirect"order",false,Req::args; $data'orderno' =...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

hdwiki老版本设计缺陷存在二次注入

简要描述： HDWiki-v5.1GBK-20121102 设计缺陷存在二次注入 详细说明： 登陆用户后按照图片所示代开，在忽略列表这一块，输入的东西会第一次被记录到 wikipms表里面,然后在重复提交一次，这次提交的时候，他会从wikipms表里面做一个检查，后台跟踪到的sql语句为： 检查语句： select id,new,delstatus,og from wikipms where toid=2 and delstatus!=2 and drafts!=1 and from not in 'dasd' or sleep5' 插入语句为： REPLACE INTO...

DUO-PSA-2014-004: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2014-004 Original Publication Date: 2014-02-12 Revision Date: 2014-03-27 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified an issue in which it is possible to bypass second factor authentication of multisite...

DEBIAN-CVE-2011-3377

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

Yahoo Mail hacked; Change your account password immediately

A really bad year for the world's second-largest email service provider, Yahoo Mail! The company announced today, 'we identified a coordinated effort to gain unauthorized access to Yahoo Mail accounts', user names and passwords of its email customers have been stolen and are used to access multip...

Simple e-Document 1.31 SQL Injection / XSS / CSRF Vulnerabilities

Simple e-Document version 1.31 suffers from login bypass, cross site request forgery, cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. +Exploit: Simple e-document v1.31 = Sql inj,Login Bypass,XSS,Insecure Cookie Handlingprivilege escalation,Arbitrary File Uploa...

Simple e-Document 1.31 SQL Injection / XSS / CSRF / File Upload

+Exploit: Simple e-document v1.31 = Sql inj,Login Bypass,XSS,Insecure Cookie Handlingprivilege escalation,Arbitrary File Upload, Second order injections, CSRF ,Insecure logout process + Author: PuN!Sh3r + Contact: http://anti-armenia.org + version: Simple e-document v1.31 + Vendor Homepage:...