Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

CVE-2012-6510

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

NASA 'Space your Face' domain hacked

Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name "p0ison-r00t" deface a sub domain of NASA https://spaceyourface.nasa.gov/. The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using...

NASA 'Space your Face' domain hacked

Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name "p0ison-r00t" deface a sub domain of NASA http://spaceyourface.nasa.gov/. The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using...

YourPHP CMS several security vulnerabilities and repair method-vulnerability warning-the black bar safety net

YourPHP CMS now online also no, the official Demo is not yet up, but last night found that map, do not say The first place ! Linux root directory ! The amount of this is a bunch of sub-directories, you can next to the station to see ! Screenshot of the address the order, but does not affect the...

Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Nov2012 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

CVE-2011-5159

Cross-site scripting XSS vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the subgroup parameter, a different vulnerability than CVE-2011-4942...

CVE-2011-5159

Cross-site scripting XSS vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the subgroup parameter, a different vulnerability than CVE-2011-4942...

Oracle Java SE JRE Multiple Remote Code Execution Vulnerabilities - Windows

Oracle Java SE JRE is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : openstack-nova-2012.1.1-15.fc17 (2012-11756)

Fix package dependencies for updates - Fix CA cert permissions issue introduced in 2012.1.1-10 - Split out into more sub packages - Update from stable upstream including... - Fix metadata file injection with xen - Fix affinity filters when hints is None - Fix marker behavior for flavors - Handle...

SuSE Update for MozillaFirefox openSUSE-SU-2012:0234-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201202341.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:0234-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

DiscuzX1. 5+ prop of the brush sub-vulnerability-vulnerability warning-the black bar safety net

If the user group set up"to purchase items a discount"option to buy when the price is discounted price, and sell when the price is not discounted price. That is the time to buy discount, sell when it is the original price. Buy: $magic'discountprice' = $G'group''magicsdiscount' ? intval$magic'pric...

Fedora 16 : boost-1.47.0-7.fc16 (2012-9029)

This update fixes a bug in Boost.Pool, which could under certain circumstances overflow allocated chunk size. This could have security implications for applications that use Boost pool without sanitizing pool parameters. - Add a sub-package boost-math with math-related bits from Boost.TR1. This...

SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Netweaver ABAP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msgserver.exe listening on 3900 by default. When the msgserver parses a message...

SA-CONTRIB-2012-055 - Fusion theme - Cross Site Scripting (XSS)

CVE: CVE-2012-2083 Fusion is a base theme that provides a configurable grid system and modular styling for common Drupal UI components. The theme outputs a CSS class for the tag based on the current URL, but does not provide sufficient filtering to prevent a Cross site scripting XSS attack. This...

Oracle Java JDK / JRE 7 < Update 17 Remote Code Execution

Binary data 6711.prm...

Australian Nokia Sub Domain Defaced by Hackers

Australian Nokia Sub Domain Defaced by Hackers Latest News coming from Zone-H that Australian Nokia Sub Domain Defaced by Hacker going with codename - "aldyfrz" an Indonesian hacker. Reason of Hacking is Unclear and Security Breach possibly just Damage the Site. The Hacker Sub domain of Nokia is ...

Ubuntu Update for ubufox USN-1355-3

Ubuntu Update for Linux kernel vulnerabilities USN-1355-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN13553.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubufox USN-1355-3 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...