DSA-2850-1 libyaml - heap-based buffer overflow

Bulletin has no description...

Foursquare vulnerability that exposes 45 million users' email addresses

A location based Social Networking platform with 45 million users,'Foursquare' was vulnerable to the primary email address disclosed. Foursquare is a Smartphone application that gives you details of nearby cafes, bars, shops, parks using GPS location and also tells about your friends nearby...

socat -- buffer overflow with data from command line

Florian Weimer of the Red Hat Product Security Team reports: Due to a missing check during assembly of the HTTP request line a long target server name in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name t...

SA-CONTRIB-2014-004 - Secure Cookie Data - Faulty Hashing

This module allows for storing data securely in a cookie through implementing the Secure Cookie Protocol. Ability to alter trusted data in the cookie The module did an incorrect comparison of the HMAC value, allowing a bypass of the HMAC verification which allows changing the cookie value. Known...

SA-CONTRIB-2014-005 - Leaflet - Access bypass

The Leaflet module enables you to display an interactive map using the Leaflet library, using entities as map features. The module exposes complete data from entities used as map features to any site visitor with a Javascript inspector like Firebug. CVE identifiers issued ACVE identifier will be...

SA-CONTRIB-2014-003 - Doubleclick for Publishers DFP - Cross Site Scripting (XSS)

This module enables you to create blocks to place advertisements from the Google Double Click for Publishers API DFP. The module doesn't sufficiently sanitize the slot names prior to output into HTML. This vulnerability is mitigated by the fact that an attacker must have a role with the permissio...

WordPress Global Flash Galleries File Upload

Exploit Title: WordPress global-flash-galleries Plugin Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 01/18/2014 Vendor Homepage: http://wordpress.org Software Link : http://downloads.wordpress.org/plugin/global-flash-galleries.zip Google dork:...

WordPress Social Ring 1.1.9 Cross Site Scripting

Exploit Title : Wordpress social ring Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vulnerable version : 1.0 up to 1.1.9 Software Link : http://downloads.wordpress.org/plugin/wordpress-social-ring.1.1.9.zip Date : 2014-01-18 Tested on : Windows 7 discovered by : ACC3SS...

SA-CORE-2014-001 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Impersonation OpenID module - Drupal 6 and 7 - Highly critical A vulnerability was found in the OpenID module that allows a malicious user to log in as other users on the site, including administrators, and hijack...

SA-CONTRIB-2014-002 - Anonymous Posting - Cross Site Scripting (XSS)

This module allows anonymous users to fill in their contact information name, email and homepage when posting any content type including Forum Topics. This allows the submitted name to be shown instead of the usual anonymous string provided by Drupal core. The module doesn't properly sanitize the...

Updated [CVE-2014-0031] CloudStack ListNetworkACL API discloses ACLs for other users

Issued: January 9, 2014 Updated: January 10, 2014 CVE-2014-0031 CloudStack ListNetworkACL API discloses ACLs for other users Product: Apache CloudStack Vendor: Apache Software Foundation Vulnerability type: Information Disclosure Vulnerable Versions: Apache CloudStack 4.2.0 CVE References:...

RHEL 5 : JBoss EAP (RHSA-2013:1784)

An update for Red Hat JBoss Enterprise Application Platform 6.2.0, which fixes two security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. Common...

Android Fragment Injection vulnerability

Hi, We have recently disclosed a new vulnerability to the Android Security Team. The vulnerability affected many apps, including Settings the one that is found on every Android device, Gmail, Google Now, Dropbox and Evernote. To be more accurate, any App which extended the PreferenceActivity clas...

WordPress Intouch跨站脚本漏洞

No description provided by source. Exploit Title : Wordpress intouch Cross Site Scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/intouch/ Google Dork : inurl:/wp-content/plugins/intouch/ Date : 2013/01/01 Tested on : Windows 8 ...

SA-CONTRIB-2014-001 - Entity API - Access Bypass

The Entity API module extends the entity API of Drupal core in order to provide a unified way to deal with entities and their properties. Comment, User and Node Statistics property access bypass CVE-2014-1398 The module's entity wrapper access API doesn't sufficiently protect comment, user and no...

WordPress Intouch 2.0 Cross Site Scripting

Exploit Title : Wordpress intouch Cross Site Scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/intouch/ Google Dork : inurl:/wp-content/plugins/intouch/ Date : 2013/01/01 Tested on : Windows 8 , Linux Version : 2.0 Software Link...

acroread: not supported anymore (important)

Adobe discontinued the Adobe Reader 9 for Linux in June 2013 and has not fixed and will not fix any further security issues in it. As there is no new version, it is officially out of support. The SUSE Security Team strongly recommends to not use it anymore. Installing this update will deinstall t...

WordPress Recommend Cross Site Scripting

Exploit Title : Wordpress Recommend to a friend plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/recommend-a-friend/ Software Link : http://downloads.wordpress.org/plugin/recommend-a-friend.2.0.2.zip Google Dork :...

Wordpress Formcraft Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress formcraft Plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:/wp-content/plugins/formcraft Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/12/2 Exploit : S...

LinkedIn iOS app HTML Message Parsing Vulnerability

LinkedIn's iOS application is prone to a vulnerability that may permit remote attackers to execute arbitrary code. Security Researcher Zouheir Abdallah has disclosed HTML parsing vulnerability in LinkedIn iOS an app, that can be used to phish for credentials or be escalated into a full blown...