DEDECMS global variable overwrite vulnerability science-vulnerability warning-the black bar safety net

DEDECMS global variable overwrite vulnerability was first wolves security team 0 9 published in the official soften up until now didn't repair the vulnerability, and now covers substantially DEDECMS full version. Personal guess is not the official deliberately left the back door. The following...

The Hacker News (THN) 1st Anniversary Celebration

The Hacker News THN 1st Anniversary Celebration It has been a wonderful "HACK" filled year as we disseminated security and hacking information around the world. We are grateful for our loyal readership and welcome new readers and contributors. Let's face it. Hacking isn't going away and growing...

Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM

I recently discovered that various Qt applications including KSSL the KDE class library responsible for SSL negotiation, Rekonq, Arora and Psi IM are vulnerable to UI spoofing due to their use of QLabel objects to render externally controlled security critical information. The primary area of...

Opera Extended Validation Information Disclosure Vulnerabilities - Windows

Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Extended Validation Information Disclosure Vulnerabilities (Mac OS X)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Mac OS X Authors: Rachana...

Opera < 11.51 Multiple Vulnerabilities (BEAST)

The version of Opera installed on the remote Windows host is prior to 11.51. It is, therefore, affected by multiple vulnerabilities : - An unspecified error can allow an insecure or malicious site to cause the browser to display security information belonging to another, secure site in the addres...

CVE-2010-4579

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the 1 security information dialog or 2 download dialog...

Design/Logic Flaw

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the 1 security information dialog or 2 download dialog...

NitroSecurity ESM 8.4.0a - Remote Code Execution

-- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it was found that perl module "ess.pm" is prone to...

Manipulating the window can be used to spoof the page address

Web page scripts can be used to alter the size of the browser window. In some cases, this manipulation can cause the wrong part of the Web page address to be displayed in the Address Bar, so that the part that is initially visible to the user is not the start of the address, and may contain conte...

CVE-2004-1080

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16359 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/wins/ms04045wins.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2004-1520

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16479 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/imaildelete.rb 2018-05-29 15:50:33+00:00| seen|...

CVE-2005-1009

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16448 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bakbonenetvaultheap.rb 2025-02-06 03:13:38+00:00|...

CVE-2015-0096

creationtimestamp| type| source ---|---|--- 2010-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14403 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms15020shortcuticondllloader.rb 2018-05-29...

CVE-2005-1348

creationtimestamp| type| source ---|---|--- 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16781 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/mailenableauthheader.rb 2025-02-06 03:13:38+00:00|...

CVE-2004-0541

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16847 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/proxy/squidntlmauthenticate.rb 2025-02-06 03:13:38+00:00|...

OXID eShop Enterprise Edition Cross Site Scripting / Session Fixation

--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...

Andy Jaquith on Measuring Meaningful Information Security Metrics

The March issue of Information Security magazine is out this week. The cover story is a look at how security information management systems need to evolve, in particular by integrating identity management with SIM in order to tie policy violations to user activity. Also, expert Andrew Jaquith...

AlienVault OSSIM Web Front End Detection

The AlienVault Open Source Security Information Management OSSIM web front end was detected on the remote host. OSSIM is a suite of security tools used to monitor and maintain a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42336; scriptversion"1.12";...

CVE-2009-3441

OSSIM (Open Source Security Information Management) is affected by CVE-2009-3441. Before version 2.1.2, remote attackers can bypass authentication and read graphs or infrastructure information by directly requesting (1) graphs/alarms_events.php or (2) host/draw_tree.php. The vulnerability arises ...