4409 matches found
Kali Linux 1.1.0 - The Best Penetration Testing Distribution
After almost two years of public development and another year behind the scenes, we are proud to announce our first point release of Kali Linux – version 1.1.0. This release brings with it a mix of unprecedented hardware support as well as rock solid stability. For us, this is a real milestone as...
Splunk 6.0.x < 6.0.6, 6.1.x < 6.1.4 XSS Vulnerability
Splunk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk";...
DSA-3156-1 liblivemedia - security update
Bulletin has no description...
MantisBT Not Fully Fixed Existence of Multiple URI Redirection Vulnerabilities
MantisBT is a popular web-based bug tracking system. MantisBT suffers from multiple URI redirection vulnerabilities that can be exploited by an attacker to redirect users to an attacker-controlled website by constructing a URI containing a malicious website and tricking them into clicking on it...
[KIS-2014-18] Mantis Bug Tracker <= 1.2.17 (ImportXml.php) PHP Code Injection Vulnerability
----------------------------------------------------------------------------- Mantis Bug Tracker = 1.2.17 ImportXml.php PHP Code Injection Vulnerability ----------------------------------------------------------------------------- - Software Link: http://www.mantisbt.org/ - Affected Versions: All...
Mantis Bug Tracker 1.2.17 PHP Code Injection Vulnerability
Mantis Bug Tracker versions 1.2.0 through 1.2.17 suffer from a PHP code injection vulnerability. ----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote...
Mantis Bug Tracker 1.2.17 PHP Code Injection
----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote $this-source-issuelink, '/' . '\d+\b/e'; 111. $replacement = '"\1" . $this-getReplacementString "\2", "\3"...
CVE-2013-3737
The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...
Design/Logic Flaw
The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...
CVE-2013-3737
The MobileUI aka RT-Extension-MobileUI extension before 1.04 in Request Tracker RT 4.0.0 before 4.0.13, when using the file-based session store Apache::Session::File and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and cache...
CVE-2013-3737
The CVE-2013-3737 issue affects the MobileUI (RT-Extension-MobileUI) for Request Tracker (RT) installations. It concerns MobileUI >=?
CVE-2014-6860
The Trial Tracker aka com.etcweb.android.trialtracker application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Trial Tracker aka com.etcweb.android.trialtracker application 1.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6860
The CVE-2014-6860 entry concerns the Android app “Trial Tracker” (com.etcweb.android.trial_tracker), version 1.1.9, where SSL/TLS connections do not verify X.509 certificates. This creates a classic man-in-the-middle risk: an attacker could spoof the server and capture or modify sensitive informa...
Design/Logic Flaw
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for 1 nodes or 2 users, which allows remote attackers to obtain sensitive information via a crafted link...
Craw Rate Tracker <= 2.0.2 - SQL Injection
The crawlrate-tracker WordPress plugin was affected by a SQL Injection security vulnerability...
Request Tracker 4.2.x < 4.2.5 Email::Address:List Module String Handling DoS
According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 4.2.x prior to 4.2.5. It is, therefore, potentially affected by a denial of service vulnerability due to an algorithmic complexity flaw in the Perl CPAN...
Request Tracker (RT) 4.2.x - 4.2.2 DoS Vulnerability
Request Tracker RT is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...
Cheese Tracker <= 0.9.9 - Local Buffer Overflow Exploit PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER 0.1 define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...