Cisco Wireless LAN Controller Cross-Site Request Forgery Vulnerability

Cisco Wireless LAN Controller WLC Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site request forgery attacks on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied input processed by the WLC management...

Fedora 17 : plexus-cipher-1.5-11.fc17 (2012-19233)

This update fixes a security bug by improving randomness of generated cipher salt. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 16 : plexus-cipher-1.5-11.fc16 (2012-19267)

This update fixes a security bug by improving randomness of generated cipher salt. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : insight-7.4.50-4.20120403cvs.fc18 (2012-18360)

Thu Nov 15 2012 Patrick Monnerat 7.4.50-4.20120403cvs - Path 'objalloc' to fix libiberty security bug CVE-2012-3509. https://bugzilla.redhat.com/showbug.cgi?id=877014 - Enable Python to support STL extensions. https://bugzilla.redhat.com/showbug.cgi?id=865554 Note that Tenable Network Security...

CVE-2012-4553

Drupal 7.x before 7.16 is vulnerable (CVE-2012-4553) to remote information disclosure and possible arbitrary PHP code execution, via an external database server during installer.php processing, related to transient conditions. The issue can allow re-installation of Drupal under certain conditions...

LG Lit

Bug in LG backlight driver allows gaining root from local user...

FastStone Image Viewer 4.6 - ReadAVonIP Crash (PoC)

!/usr/bin/perl FastStone Image Viewer 4.6 Vendor URI: http://www.faststone.org Vendor Description: An image browser, converter and editor that supports all major graphic formats including BMP, JPEG, JPEG 2000, GIF, PNG, PCX, TIFF, WMF, ICO, TGA and camera raw files. It has a nice array of feature...

Mandrake Linux Security Advisory : imwheel (MDKSA-2000:001)

A security bug was found in imwheel; the bug can be exploited to provide local users with root access. Version 0.9.8 fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...

Mandrake Linux Security Advisory : glibc (MDKSA-2000:045-1)

A bug was discovered in ld.so that could allow local users to obtain root privileges. The dynamic loader, ld.so, is responsible for making shared libraries available within a program at run-time. Normally, a user is allowed to load additional shared libraries when executing a program; they can be...

Design/Logic Flaw

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security...

reflected xss in the pageId request parameter in 500page.jsp

A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert1%3C/script%3E code /images/icons/emoticons/warning.png" You can...

reflected xss in the pageId request parameter in 500page.jsp

A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert1%3C/script%3E code /images/icons/emoticons/warning.png" You can...

Fedora 16 : perl-DBD-Pg-2.19.2-1.fc16 (2012-10871)

Update to latest upstream version, fixed the security bug CVE-2012-1151 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Basilic Remote Command Execution

Hi Dear Sir Basilic is an Automated Bibliography Server for Research Publications Diffusion that use by many research center. there is a RCE bug in basilic/Config/diff.php s could allow an attacker to run system command in server. sample:...

MySQL Remote Root Authentication Bypass

!/usr/bin/python This has to be the easiest "exploit" ever. Seriously. Embarassed to submit this a little. Title: MySQL Remote Root Authentication Bypass Written by: Dave Kennedy ReL1K http://www.secmaniac.com Original advisory here: seclists.org/oss-sec/2012/q2/493 import subprocess ipaddr =...

CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability

CVE-2012-2122 : Serious Mysql Authentication Bypass Vulnerability A serious security bug in MariaDB and MySQL Disclosed, According to Advisory All MariaDB and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 are vulnerable. This issue got assigned an id CVE-2012-2122. "When a user connects to...

Firefox security bug (proxy-bypass) in current Tor BBs

https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs "A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS...

Tor Warns of Firefox Bug That Threatens User Privacy

The developers at the Tor Project are warning users about a serious flaw in Firefox that’s included the latest version of the Tor Browser Bundle that could enable an attacker to gather information about the servers a victim is using, poking a hole in the privacy and anonymity that Tor is designed...

IP.Board Add-on IP.Gallery 4.2.1 Cross Site Scripting

Exploit Title: IP.Board 3.3.0 Cross Site Scripting Date: 27.03.2012 Author: Sony and Flexxpoint Software Link: http://community.invisionpower.com/ Web Browser : Mozilla Firefox Blog Flexxpoint: http://flexxpoint.blogspot.com/ Blog Sony: http://st2tea.blogspot.com Site : http://insecurity.ro PoC:...

USN-1395-1: PyPAM vulnerability

Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code...