Apple OS X Yosemite system exposure more local to mention the right vulnerability-vulnerability warning-the black bar safety net

Foreign security researchers have recently exposed the latest version of Mac OSX 10.10.1 system on the presence of multiple local mention the right vulnerability, due to the submitted to Apple the official time for too long are not get a clear answer, leading the researcher directly to the...

jenkins: multiple issues

SECURITY-87/CVE-2014-3661 anonymous DoS attack through CLI handshake This vulnerability allows unauthenticated users with access to Jenkins' HTTP/HTTPS port to mount a DoS attack on Jenkins through thread exhaustion. - SECURITY-110/CVE-2014-3662 User name discovery Anonymous users can test if the...

Marty Bochane MDBMS 0.9 xbx Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1252/info A vulnerability exists in the MDBMS database, written by Marty Bochane. By supplying a line of sufficient length to the MDBMS server, containing machine executable code, it is possible for a remote attacker to...

Code injection

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

e107 My_Gallery Plugin Arbitrary File Download Vulnerability

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 and prior Link:...

Hewlett-Packard OpenView Radia Integration Server File System Exposure Vulnerability

This vulnerability allows remote attackers to access arbitrary files on systems with vulnerable installations of Hewlett-Packard OpenView Radia Integration Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server bound by default to TCP...

IBM Director 5.10 - Redirect.bat Directory Traversal

IBM Director 5.10 - Redirect.bat Directory Traversal There is a vulnerability within the Redirect.bat file on a ibm director cgi which allows a directory transversal to take place which in turn exposes most files on the system to be read without authorization...

[SA19792] SL_site Multiple Vulnerabilities and Weakness

TITLE: SLsite Multiple Vulnerabilities and Weakness SECUNIA ADVISORY ID: SA19792 VERIFY ADVISORY: http://secunia.com/advisories/19792/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: SLsite 1.x...

[SA19578] MAXdev MD-Pro "topicid" SQL Injection Vulnerability

TITLE: MAXdev MD-Pro "topicid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19578 VERIFY ADVISORY: http://secunia.com/advisories/19578/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...

[SA17174] versatileBulletinBoard Cross-Site Scripting and SQL Injection

TITLE: versatileBulletinBoard Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA17174 VERIFY ADVISORY: http://secunia.com/advisories/17174/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of system information WHERE: From...

[SA16236] Clever Copy Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15788] WebCalendar "assistant_edit.php" Security Bypass

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

igallery33.txt

Hat-Squad Advisory: i-Gallery directory traversal Product: i-Gallery Vendor Url: http://www.b-cp.com Version: 3.3 older versions not tested , but assumed vulnerable Vulnerability: Directory traversal and CSS bug Release Date: Vendor Status: Informed: 15 June 2005 Second Contact: 19 June 2005...

[SA15641] Cerberus Helpdesk "errorcode" Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA14284] Mercuryboard "debug" Debug Information Disclosure

TITLE: Mercuryboard "debug" Debug Information Disclosure SECUNIA ADVISORY ID: SA14284 VERIFY ADVISORY: http://secunia.com/advisories/14284/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: MercuryBoard 1.x http://secunia.com/product/4560/ DESCRIPTION:...

[SA13304] WinFTP Server Clear Text User Credential Disclosure

TITLE: WinFTP Server Clear Text User Credential Disclosure SECUNIA ADVISORY ID: SA13304 VERIFY ADVISORY: http://secunia.com/advisories/13304/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: WinFTP Server 1.x http://secunia.com/product/4318/...

Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues

-- Corsaire Security Advisory -- Title: Danware NetOp Host multiple information disclosure issues Date: 19.06.04 Application: Danware NetOp prior to 7.65 build 2004278 Environment: Windows NT/2000/2003/XP/98 Author: Martin O'Neal [email protected] Audience: General release Reference:...

adv17.txt

+| Advisory 17. Search Engine & Directory by Turbo Seek Software: Search Engine & Directory Powered by Turbo Seek Vendor: FocalMedia.Net http://www.focalmedia.net Vulnerability: âîçìîæíîñòü ÷òåíèÿ ôàéëîâ Risk: ñðåäíèé Date: 10'Sept 2004 discovered by durito -duritoatmaildotru- HTTP: www.lwb57.org...

Zope 2.x - Incorrect XML-RPC Request Information Disclosure

Zope 2.x - Incorrect XML-RPC Request Information Disclosure source: https://www.securityfocus.com/bid/5806/info A vulnerability has been reported for Zope 2.5.1 and earlier. Reportedly, Zope does not handle XML-RPC requests properly. Specially crafted XML-RPC requests may cause Zope to respond to...

ArGoSoft 1.8 Mail Server - Directory Traversal

source: https://www.securityfocus.com/bid/5144/info ArGoSoft Mail Server is an STMP, POP3 and Finger server for Microsoft Windows environments. ArGoSoft has a built in web server to enable remote access to mail. A directory traversal issue has been reported in the web server, which could allow...