67 matches found
Cross site request forgery (csrf)
Nagios Core application version 4.2.4 is vulnerable to Site-Wide Cross-Site Request Forgery CSRF in many functions, like adding – deleting for hosts or servers...
[SECURITY] Fedora 24 Update: nodejs-request-2.67.0-6.fc24
Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...
ClearSCADA - Remote Authentication Bypass Exploit
There is an authentication bypass vulnerability in ClearSCADA that can be exploited by triggering an exception in dbserver.exe and taking advantage of the way the program handles it. !/usr/bin/python cs-auby.py ClearSCADA Remote Authentication Bypass Exploit Jeremy Brown jbrown3264/gmail Oct 2010...
Localize: Unexpected array leaks information about the system
By changing a string parameter on the /pages/settings page to an array see example.png and submitting the form, the page shows an error message leaking information about the server and functions used see error.png. This works on multiple POST parameters. Warning: trim expects parameter 1 to be...
[SECURITY] Fedora 18 Update: nodejs-request-2.21.0-1.fc18
Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...
CVE-2013-1997
Multiple buffer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the 1 XAllocColorCells, 2 XkbReadGetDeviceInfoReply, 3 XkbReadGeomShapes, 4 XkbReadGetGeometryReply...
