Debian Security Advisory DSA 2412-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 2412-1. OpenVAS Vulnerability Test $Id: deb24121.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2412-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2414-2 (fex)

The remote host is missing an update to fex announced via advisory DSA 2414-2. OpenVAS Vulnerability Test $Id: deb24142.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2414-2 fex Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2428-1 : freetype - several vulnerabilities

Mateusz Jurczyk from the Google Security Team discovered several vulnerabilities in Freetype's parsing of BDF, Type1 and TrueType fonts, which could result in the execution of arbitrary code if a malformed font file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Drupal 7.12 - Multiple Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Drupal CMS 7.12 latest stable release Multiple Vulnerabilities Date : 02-03-2012 Author : Ivano Binetti http://ivanobinetti.com...

WebfolioCMS <= 1.1.4 CSRF (Add Admin/Modify Pages)

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano Binetti...

WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add Admin/Modify Pages)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...

[SECURITY] [DSA 2414-2] fex regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2414-2 [email protected] http://www.debian.org/security/ Nico Golde February 25, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2416-1] notmuch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...

Debian DSA-2414-2 : fex - insufficient input sanitization

Nicola Fioravanti discovered that FX, a web service for transferring very large files, is not properly sanitizing input parameters of the 'fup'script. An attacker can use this flaw to conduct reflected cross-site scripting attacks via various script parameters. %NASLMINLEVEL 70300 C Tenable Netwo...

SyndeoCMS <= 3.0 CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: SyndeoCMS = 3.0 CSRF Vulnerability Author: Ivano Binetti http://ivanobinetti.com Program development website: http://www.syndeocms.org/ Download address: http://sourceforge.net/projects/syndeocms Affected version: 3.0 and below Test System Platform: Debian Squeeze 6.0 +--------------+Add...

DSA-2414-1 fex - cross-site scripting

Bulletin has no description...

PlumeCMS <= 1.2.4 CSRF Vulnerability

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden"...

Plume CMS 1.2.4 - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden" name="nconten...

Plume CMS 1.2.4 - Cross-Site Request Forgery

Plume CMS 1.2.4 - Cross-Site Request Forgery +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden" name="ncategoryid"...

SyndeoCMS 3.0 - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS I'm adding ADMIN account input type="...

PlumeCMS 1.2.4 Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden" n...

SyndeoCMS <= 3.0 CSRF Vulnerability

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS I'm adding ADMIN account input type="hidden" name="access13"...

SocialCMS 1.0.2 - Cross-Site Request Forgery

SocialCMS 1.0.2 - Cross-Site Request Forgery +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

SocialCMS 1.0.2 - Cross-Site Request Forgery

+-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

SocialCMS CSRF Vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...