Design/Logic Flaw

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

Code injection

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2584

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2584

Cisco Show and Share versions 5.2(1) and 5.2(2) prior to 5.2(2.1) are affected by CVE-2011-2584, which allows anonymous users to access several administrative pages (Encoders/Pull Configs, Push Configs, Video Encoding Formats, Transcoding) and potentially cause a live-event DoS or disclosure of i...

CVE-2011-2585

Cisco Show and Share (5.2(2) and earlier) is vulnerable to CVE-2011-2585 where an authenticated user with video-upload privileges can upload code that executes with the web server’s non-root privileges. Cisco’s advisory (CSCto69857) states the fix is in 5.2(2.1) or later; upgrade to a release equ...

Cisco Show and Share File Upload Arbitrary Code Execution Vulnerability

Cisco Show and Share contains a vulnerability that could allow an authenticated, remote attacker to execute code on a vulnerable device. The vulnerability is due to insecure restrictions when allowing videos to be uploaded to an affected device. An authenticated, remote attacker with privileges t...

Cisco Show and Share Security Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Two Security Advisories

Cisco has released two security advisories to address vulnerabilities affecting CiscoWorks Common Services and Cisco Show and Share. These vulnerabilities may allow an attacker to execute arbitrary code or bypass security restrictions. US-CERT encourages users and administrators to review Cisco...

Sesame Street YouTube Channel Hacked, Porn Posted

Sesame Street YouTube Channel Hacked, Porn Posted On Sunday afternoon, some of the world's worst lowlifes decided to hack the Sesame Street YouTube channel and replace some of the videos with pornographic clips. For about 20 minutes yesterday, visitors to the YouTube channel of the popular...

Sesame Street YouTube Channel Hacked, Porn Posted

Sesame Street YouTube Channel Hacked, Porn Posted On Sunday afternoon, some of the world's worst lowlifes decided to hack the Sesame Street YouTube channel and replace some of the videos with pornographic clips. For about 20 minutes yesterday, visitors to the YouTube channel of the popular...

CVE-2010-4936

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4944

SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...

CVE-2010-4936

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4936

CVE-2010-4936 affects the Joomla! Slide Show (com_slideshow) component. The vulnerability is an SQL injection exposed via the catid parameter to index.php, allowing remote attackers to execute arbitrary SQL commands. The data sources describe the affected component and vulnerability class consist...

CVE-2011-3010

Multiple cross-site scripting XSS vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or 2 the query string to SlideShow.pm in the...

Directory traversal

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a showreport action...

CVE-2010-4835

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a showreport action...

Fedora Update for feh FEDORA-2011-8750

Check for the Version of feh OpenVAS Vulnerability Test Fedora Update for feh FEDORA-2011-8750 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...