MGASA-2014-0486 Updated perl-Plack package fixes security vulnerability

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files CVE-2014-5269...

SA-CONTRIB-2014-074 - Storage API - Code execution prevention

Storage API is a low-level framework for managed file storage and serving. The module creates an .htaccess file in the files directory to prevent code execution, but copied the Drupal core file and wasn't updated to include the improved file contents after SA-CORE-2013-003. This vulnerability is...

RobTex Viking Server 1.0.7 Relative Path Webroot Escaping Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2643/info The Viking Server is a freely available software package maintained and distributed by Robtex. The Viking Server provides multiple protocol service on Windows 95, 98, and NT systems. A problem in the software...

Virus removal website compromised to serving malware

Virus removal website compromised to serving malware One of the Famous Virus Removal Service website : laptopvirusrepair.co.uk is compromised and Hacker is Serving Malware on the website. In above screenshot Avira detects the JS/Blacole.psak Java script Virus hosted on the site. The snippet of co...

OpenX Ad Serving SW Attacked

Hackers have exploited flaws in a popular open-source advertising software to place malicious code on advertisements on several popular Web sites over the past week. Read the full article. Computerworld...

IBM WebSphere Application Server 7.0 < Fix Pack 5

IBM WebSphere Application Server 7.0 before Fix Pack 5 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Non-standard HTTP methods are allowed. PK73246 - If the admin console is directly accessed from HTTP, the console fails to redirect t...

Design/Logic Flaw

IBM WebSphere Application Server WAS 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors...

CVE-2009-2092

IBM WebSphere Application Server WAS 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors...

FTP File Server

This module provides a FTP service This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FTP File Server', 'Description' = %q This module provides a FTP service , 'Author' = 'hdm', 'License' =...

Paul McCartney's official site serving malware

From ZDNet Dancho Danchev The official web site of Paul McCartney paulmccartney.com has been compromised, and is serving live exploits to its visitors zdnet.com. According to Mary Landesman scansafe.com, the compromise might have occurred through stolen FTP accounting data, taking into...

[SECURITY] Fedora 7 Update: Perlbal-1.70-1.fc7

Perlbal is a single-threaded event-based server supporting HTTP load balancing, web serving, and a mix of the two. Perlbal can act as either a w eb server or a reverse proxy. One of the defining things about Perlbal is that almost everything can be configured or reconfigured on the fly without...

[SECURITY] Fedora 8 Update: Perlbal-1.70-1.fc8

Perlbal is a single-threaded event-based server supporting HTTP load balancing, web serving, and a mix of the two. Perlbal can act as either a w eb server or a reverse proxy. One of the defining things about Perlbal is that almost everything can be configured or reconfigured on the fly without...

CVE-2005-0425: Undefined Security Weakness

Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages .jsp via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine...

Apache Httpd < 2.0.44 : Apache can serve unexpected files

On Windows platforms Apache could be forced to serve unexpected files by appending illegal characters such as '' to the request URL...

[resend] Strumpf Noir Society on BadBlue

Strumpf Noir Society Summaries ! Public release ! -- -= Strumpf Noir Society on BadBlue =- Sorry, couldn't resist.. Ok, so we might not be able to actually drive a Mach truck, but this seems to do the trick, give or take a few millions : Release date: Thursday, January 17, 2002 Introduction BadBl...