AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

Linux Kernel 3.0 3.3.5 - CLONE_NEWUSER|CLONE_FS Local Privilege Escalation

Linux Kernel 3.0 3.3.5 - CLONENEWUSER|CLONEFS Local Privilege Escalation / source: https://www.securityfocus.com/bid/58478/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks....

Solaris 10 (x86) : 149109-01 (deprecated)

SunOS 5.10x86: libgsf-1.so.1.8.2 patch. Date this patch was last updated by Sun : Dec/07/12 This plugin has been deprecated and either replaced with individual 149109 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Solaris 10 (sparc) : 149108-01 (deprecated)

SunOS 5.10: libgsf-1.so.1.8.2 patch. Date this patch was last updated by Sun : Dec/07/12 This plugin has been deprecated and either replaced with individual 149108 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Oracle Weblogic Apache Connector POST Request Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Solaris 10 (sparc) : 148002-01 (deprecated)

SunOS 5.10: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 This plugin has been deprecated and either replaced with individual 148002 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...

VBulletin Underground Website Hacked By 'Why So Serious'

VBulletin Underground Website Hacked By 'Why So Serious ' Vbteam.info is underground vBulletin Hacking website. It provides free vBulletin. This website is hacked by a new hacker named as "Why So Serious? ". He also hacked EA Game - Battlefield Heroes Accounts. He leaked 1400+ accounts of the...

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker

EA Game - Battlefield Heroes Accounts Hacked by 'Why So Serious?' Albanian Hacker One of the most famous games over the world Battlefield Heroes which is created by EA Games is hacked by a new hacker named "Why So Serious?". The hacker is from Albania. He made a post on Battlefield Heroes site &...

python security, bug fix, and enhancement update

python: 2.6.6-20 Resolves: CVE-2010-3493 2.6.6-19 Resolves: CVE-2011-1015 2.6.6-18 Resolves: CVE-2011-1521 2.6.6-17 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-16 - recompile against systemtap 1.4 Related: rhbz569695 2.6.6-15 - fix race condition that sometimes breaks the build wi...

Sony Subsidiary ISP Compromised, Virtual Tokens Stolen

Sony’s subsidiary Internet service provider, So-net, was broken into on Friday by an intruder who allegedly made off with some $1200 in virtual tokens, according to a NetworkWorld report. The report claims that the intrusion originated from a single IP address between May 16 and 17, where an...

CVE-2011-0808

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the...

Buffer overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the...

PT-2011-2657

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.2.0 through 8.3.5.0 Outside In Technology versions prior to 8.3.5.5684 Description The issue affects confidentiality, integrity, and availability. It is related to Outside In Filters, but the exact vectors...

DEBIAN-CVE-2010-3856

ld.so in the GNU C Library aka glibc or libc6 before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LDAUDIT environment variable to reference dynamic shared objects DSOs as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a...

Mandriva Update for kdeplasma-addons MDVA-2010:219 (kdeplasma-addons)

Check for the Version of kdeplasma-addons OpenVAS Vulnerability Test Mandriva Update for kdeplasma-addons MDVA-2010:219 kdeplasma-addons Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for kdeplasma-addons MDVA-2010:219 (kdeplasma-addons)

Check for the Version of kdeplasma-addons OpenVAS Vulnerability Test Mandriva Update for kdeplasma-addons MDVA-2010:219 kdeplasma-addons Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for kipi-plugins MDVA-2010:220 (kipi-plugins)

Check for the Version of kipi-plugins OpenVAS Vulnerability Test Mandriva Update for kipi-plugins MDVA-2010:220 kipi-plugins Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Solaris 10 (sparc) : 143561-09

SunOS 5.10: gssd mechkrb5.so.1 kadmind pa. Date this patch was last updated by Sun : Mar/30/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 143562-09

SunOS 5.10x86: gssd mechkrb5.so.1 kadmin. Date this patch was last updated by Sun : Mar/30/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...