Joomla Component com_performs component arbitary file upload

Exploit for php platform in category web applications Exploit Title: Joomla Comperforms component arbitary file upload Google Dork: inurl:index.php?option=comperforms upload cv Date: 2012-09-27 Exploit Author: Mormoroth Vendor Homepage: http://www.performs.org.au/ Version: 2.4 and prior Tested on...

Facebook Patches Webcam Snooping Vulnerability

Late last week the social networking giant Facebook patched a particularly voyeuristic security vulnerability in the platform that could have given malefactors the ability to remotely turn on the webcams of other users and post videos to their profiles, according to a Bloomberg News report. The...

Fedora Update for pki-core FEDORA-2012-20220

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xen FEDORA-2012-19828

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-19828 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0590-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for update openSUSE-SU-2012:1376-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201213761.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for update openSUSE-SU-2012:1376-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for update openSUSE-SU-2012:1421-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201214211.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for update openSUSE-SU-2012:1421-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Fedora Update for sticky-notes FEDORA-2012-18396

Check for the Version of sticky-notes OpenVAS Vulnerability Test Fedora Update for sticky-notes FEDORA-2012-18396 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora 18 : system-config-users-1.3.1-1.fc18 (2012-17513)

This update uses pkexec instead of consolehelper/usermode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for bugzilla FEDORA-2012-18224

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Active Defense class software generic implementation vulnerability-a vulnerability warning-the black bar safety net

Active Defense software in the realization of the presence of a Common Vulnerability, malware can take to bypass security checks to perform malicious acts The main anti-block system some of the key operation in these monitoring points do parameter checking. Because the parameters often come from...

Improper security filtering for cross-origin wrappers — Mozilla

Mozilla developer Bobby Holley reported that security wrappers filter at the time of property access, but once a function is returned, the caller can use this function without further security checks. This affects cross-origin wrappers, allowing for write actions on objects when only read actions...

Fedora Update for mcrypt FEDORA-2012-17318

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin

waraxe-2012-SA095 - Multiple Vulnerabilities in Wordpress FoxyPress Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 30. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-95.html Description of vulnerab...

WordPress Plugin foxypress 0.4.2.5 - Multiple Vulnerabilities

WordPress Plugin foxypress 0.4.2.5 - Multiple Vulnerabilities waraxe-2012-SA095 - Multiple Vulnerabilities in Wordpress FoxyPress Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 30. October 2012 Location: Estonia, Tartu Web:...

WordPress Plugin foxypress 0.4.2.5 - Multiple Vulnerabilities

waraxe-2012-SA095 - Multiple Vulnerabilities in Wordpress FoxyPress Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 30. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-95.html Description of vulnerab...

WordPress FoxyPress 0.4.2.5 XSS / CSRF / SQL Injection

waraxe-2012-SA095 - Multiple Vulnerabilities in Wordpress FoxyPress Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 30. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-95.html Description of vulnerab...

WordPress FoxyPress 0.4.2.5 XSS / CSRF / SQL Injection

WordPress FoxyPress plugin version 0.4.2.5 suffers from cross site request forgery, cross site scripting, path disclosure, remote shell upload, open redirect, and remote SQL injection vulnerabilities. Multiple Vulnerabilities in Wordpress FoxyPress Plugin...

Fedora Update for python-django-horizon FEDORA-2012-16148

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mingw-libpng FEDORA-2012-15613

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...