1042 matches found
Debian: Security Advisory (DSA-2461-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-2437-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-2444-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities
WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-20...
Debian DSA-2460-1 : asterisk - several vulnerabilities
Several vulnerabilities were discovered in the Asterisk PBX and telephony toolkit : - CVE-2012-1183 Russell Bryant discovered a buffer overflow in the Milliwatt application. - CVE-2012-2414 David Woolley discovered a privilege escalation in the Asterisk manager interface. - CVE-2012-2415 Russell...
Debian DSA-2455-1 : typo3-src - missing input sanitization
Helmut Hummel of the TYPO3 security team discovered that TYPO3, a web content management system, is not properly sanitizing output of the exception handler. This allows an attacker to conduct cross-site scripting attacks if either third-party extensions are installed that do not sanitize this...
CVE-2012-0216
The CVE-2012-0216 entry concerns the Debian Apache2 package: when using mod_php or mod_rivet, the default config exposes example scripts under doc/ that can enable local XSS, privilege escalation, or information disclosure via localhost HTTP requests. Affected releases include Debian Squeeze (<...
[SECURITY] [DSA 2453-2] gajim regression
------------------------------------------------------------------------- Debian Security Advisory DSA-2453-2 [email protected] http://www.debian.org/security/ Nico Golde April 19, 2012 http://www.debian.org/security/faq -...
PlumeCMS 1.2.4 Cross Site Scripting
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...
PlumeCMS <= 1.2.4 Multiple Persistent XSS
Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti...
Plume CMS 1.2.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...
Simple PHP Agenda 2.2.8 - Cross-Site Request Forgery (Add Admin / Add Event)
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Simple PHP Agenda = 2.2.8 CSRF Add Admin - Add Event Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...
[SECURITY] [DSA 2398-2] curl regression
------------------------------------------------------------------------- Debian Security Advisory DSA-2398-2 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...
SocialCMS 1.0.2 Cross Site Scripting
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
SocialCMS <= 1.0.2 XSS (Persistent and Reflected) Vulnerabilities
Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author :...
Debian DSA-2444-1 : tryton-server - privilege escalation
It was discovered that the Tryton application framework for Python allows authenticated users to escalate their privileges by editing the Many2Many field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...
Debian DSA-2441-1 : gnutls26 - missing bounds check
Matthew Hall discovered that GNUTLS does not properly handle truncated GenericBlockCipher structures nested inside TLS records, leading to crashes in applications using the GNUTLS library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
[BSA-068] Security Update for freetype
I uploaded new packages for freetype which fixed the following security problems: CVE-2011-3439 FreeType allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-3256. CVE-2011-3256 FreeType before...
Debian DSA-2438-1 : raptor - programming error
It was discovered that Raptor, a RDF parser and serializer library, allows file inclusion through XML entities, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA 2437-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2437-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 21, 2012 http://www.debian.org/security/faq -...