SA-CONTRIB-2012-115 - Gallery formatter - Cross Site Scripting (XSS)

Gallery formatter provides a field formatter for images that turns the fields into jQuery galleries. The module did not properly escape input from the user before printing it to the browser, allowing malicious users to inject script code into the page. This vulnerability is mitigated by the fact...

SA-CONTRIB-2012-117 - Location - Access Bypass

The Location module allows real-world geographic locations to be associated with Drupal nodes, including people, places, and other content. The Location Search sub-module adds a search page for searching for locations. The Location Search module fails to enforce content and user access permission...

SA-CONTRIB-2012-116 - Subuser - Cross Site Request Forgery (CSRF) and Access Bypass

The Subuser module allows users to be given the permission to create subusers. The subusers may then be automatically assigned a role or roles. The parent user then has the ability to manage the subusers they have created. A parent user is allowed to assume the role of a subuser they created swit...

17 years old hacker will demonstrate Linux ELF Virus at 'The Hackers Conference 2012'

The Biggest Hacking Mania has arrived - 'The Hackers Conference 2012'. In this first of its kind conference in India, Blackhat hackers drawn from around the world will demonstrate how they access a victim's personal information, and even confidential data available on the Android cell phone. The...

Joomla Hello component suffers from a local file inclusion vulnerability.

No description provided by source. Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c :...

Joomla Hello Local File Inclusion

Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c : comhello&controller=../../../../../../../../etc/passwd%00 Please Use Null Byte %...

Joomla Component com_hello Local File Include

Exploit for php platform in category web applications Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c :...

SA-CONTRIB-2012-114 - Campaign Monitor - Cross Site Scripting (XSS)

This module enables you to integrate Campaign Monitor into Drupal so you can give users the ability to subscribe and unsubscribe for your Campaign Monitor lists. The module doesn't sufficiently validate strings entered in the administration interface. This vulnerability is mitigated by the fact...

Ajax Data Uploader Shell Upload

0101010101----010101010101010 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101010101 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 0101010101----0101...

phpBB uploadpic.php Shell Upload

0101010101----010101010101010 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101010101 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 0101010101----0101...

PHP NUKE ALL VERSION MULTI VULNERABILITY

Exploit Title : PHP NUKE ALL VERSION MULTI VULNERABILITY Author : Iranian Security & Research Team Discovered By : Nafsh Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 23/1/2012 - 19:30 Software Link : www.phpnuke.ir Security Risk : High...

SA-CONTRIB-2012-107 - Search autocomplete - Access bypass

This module allows you to add autocomplete functionality to virtually any fields of a Drupal site. The module doesn't sufficiently protect access to the module admin page. This vulnerability is mitigated by the fact that the user can only access the page, disable an autocompletion or change...

RedHat Update for librsvg2 RHSA-2011:1289-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

WordPress Flexiweb-Form Shell Upload

0101010101----010101010101010 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101010101 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 0101010101----0101...

B2CPrint Remote Shell Upload

0101010101 010101010101010 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101010101 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 0101010101 0101 010 + Exploit Title : B2CPrint Remote File Uploader Vulnerability ...

B2CPrint Remote File Uploader Vulnerability

Exploit for asp platform in category web applications + Exploit Title : B2CPrint Remote File Uploader Vulnerability + Google Dork : inurl:upload.asp intext:B2CPrint Online Printing Solutions + Autor : Mr.XpR + Resacher Team : IRaNHaCK Security Team + Bug Level : High RFU + Test : 7 , Linux Back...

FreeBSD : chromium -- multiple vulnerabilities (ff922811-c096-11e1-b0f4-00262d5ed8ee)

Google Chrome Releases reports : 118633 Low CVE-2012-2815: Leak of iframe fragment id. Credit to Elie Bursztein of Google. 120222 High CVE-2012-2817: Use-after-free in table section handling. Credit to miaubiz. 120944 High CVE-2012-2818: Use-after-free in counter layout. Credit to miaubiz. 120977...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 118633 Low CVE-2012-2815: Leak of iframe fragment id. Credit to Elie Bursztein of Google. 120222 High CVE-2012-2817: Use-after-free in table section handling. Credit to miaubiz. 120944 High CVE-2012-2818: Use-after-free in counter layout. Credit to miaubiz. 120977...

Dove Forums 1.0.3 Cross Site Request Forgery

In The Name Of Allah +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Exploit Title:Dove Forums-Add admin CSRF @@@@@ | Date : 2012-06-26 @ @ + Author :Ashiyane Digitl Security Team @ @@@ @ | Vendor :http://www.doveforums.com/ @ @ @ @ + Version: 1.0.3 @ @@ ...

Stable Channel Update

The Google Chrome team is happy to announce the arrival of Chrome 20 20.0.1132.43 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority ...