CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection

Exploit title: CakePHP XXE injection Date: 01.07.2012 Software Link: http://www.cakephp.org Vulnerable version: 2.x - 2.2.0-RC2 Tested on: Windows and Linux Author: Pawel Wylecial http://h0wl.pl 1. Background Short description from the project website: "CakePHP makes building web applications...

Fedora 17 : gallery3-3.0.4-1.fc17 (2012-9705)

Gallery 3.0.4 was released with the following release notes : After several extensive internal and external security audits which discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4 as a security release. All of the issues require that someone with malicious intent either have ...

Fedora 15 : asterisk-1.8.12.2-1.fc15 (2012-8685)

The Asterisk Development Team has announced the release of Asterisk 1.8.12.2. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk The release of Asterisk 1.8.12.2 resolves an issue reported by the community and would have not been possible...

Security Release: symfony 1.4.18 released

symfony 1.4.18 has just been released. Read the post carefully as this version fixes a security vulnerability. Dmitri Groutso contacted us a couple of days ago about a possible security issue in the session code: "The regenerate method as implemented by database backed session classes do not...

Fedora 17 : asterisk-10.3.1-1.fc17 (2012-6704)

The Asterisk Development Team has announced security releases for Asterisk 1.6.2, 1.8, and 10. The available security releases are released as versions 1.6.2.24, 1.8.11.1, and 10.3.1. These releases are available for immediate download at...

samba and samba3x security update

3.5.10-116 - Security Release, fixes CVE-2012-2111 - resolves: 815688...

samba security update

3.5.10-115 - Security Release, fixes CVE-2012-1182 - resolves: 804644...

samba3x security update

3.5.10-0.108 - Security Release, fixes CVE-2012-1182 - resolves: 804650...

[ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256

Everyone, Below is our announcement for the security issue reported to us from Codenomicon, via CERT-FI. All previous versions of Apache Traffic Server are vulnerable, and we urge users to upgrade to either v3.0.4 or v3.1.3 immediately. Both releases are available from our download site at...

Routes behind a firewall are accessible even when not logged in

More info at https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released...

Routes behind a firewall are accessible even when not logged in

More info at https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released...

XML decoding attack vector through external entities

More info at https://symfony.com/blog/security-release-symfony-2-0-11-released...

XML decoding attack vector through external entities

More info at https://symfony.com/blog/security-release-symfony-2-0-11-released...

phpDenora 1.4.6 - Multiple SQL Injections

Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...

ImpressPages CMS 'actions.php' Remote Code Execution Vulnerability

ImpressPages CMS is prone to a remote-code execution vulnerability. Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. ImpressPages CMS 1.0.12 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id:...

CMS Made Simple < 1.9.4.3 Remote Database Corruption Vulnerability

CMS Made Simple is prone to a vulnerability that could result in the corruption of the database. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

samba3x security update

3.5.4-0.83.2 - Security Release, add fix for CVE-2011-2724 - related: 722555 3.5.4-0.83.1 - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722555...

Foxit Releases Foxit Reader 5.0.2

The Foxit Corporation has released Foxit Reader 5.0.2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the security release notes for Foxit Reader 5.0.2 and apply any necessary updates...

Fedora 15 : asterisk-1.8.4.4-2.fc15 (2011-8983)

Remove systemd dependencies from EL6 and F15 The Asterisk Development Team has announced the release of Asterisk versions 1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security releases. These releases are available for immediate download at...

SuSE 11.1 Security Update : perl-Config-General (SAT Patch Number 4776)

This update adds the perl-Config-General to the SLES update channel, which is a new requirement after the last tgt security release. - 697106: tgt is not installable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuS...