OpenX -- SQL injection vulnerability

Revive reports: An SQL-injection vulnerability was recently discovered and reported to the Revive Adserver team by Florian Sander. The vulnerability is known to be already exploited to gain unauthorised access to the application using brute force mechanisms, however other kind of attacks might be...

17-year-old alleged Anonymous Hacker charged for unauthorised access

A 17 year old alleged hacker accused of being associated with Anonymous hacker appeared in Parramatta Children's Court on Friday, over multiple unauthorised access crime on the behalf of hacktivist collective Anonymous. The Australian Federal Police AFP issued a statement over the matter, saying...

[20130401] - Core - Privilege Escalation

Inadequate permission checking allows unauthorised user to delete private messages...

Umbraco CMS - Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Umbraco CMS Remote Command Execution'...

UK Police Charge another alleged Anonymous member in Hacking Cases

UK Police Charge another alleged Anonymous member in Hacking Cases A student has been charged with involvement in cyber attacks by the hacking group Anonymous against companies that withdrew online payment services from WikiLeaks. Peter David Gibson, from Hartlepool, will appear before magistrate...

Joomla! 1.6 < 1.6.2 Multiple Vulnerabilities (deprecated)

Binary data 5893.prm...

Former employee held for hacking server of BPO unit in Hyderabad !

A former software professional on Saturday was arrested for allegedly hacking the server of a city-based BPO company, where he previously worked, police said. The hacker identified as Shaik Mahammad Ghouse Bhasa allegedly secured unauthorised access to the computer systems of M/s IVOICE Network...

FreeBSD : moodle -- multiple vulnerabilities (66759ce6-7530-11df-9c33-000c29ba66d2)

The Moodle release notes report multiple vulnerabilities which could allow cross site scripting, XSS attacks, unauthorised deletion of attempts in some instances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

IceWarp WebMail Mail Forgery

Advisory: IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content During a penetration test, RedTeam Pentesting discovered that the emails sent by the IceWarp WebMail Server when using the "Forgot Password" function are generated on the client side. Furthermore, the...

Debian DSA-1488-1 : phpbb2 - several vulnerabilities

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of...

DSA-1488-1 phpbb2 - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 766-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 766-1. A vulnerability has been discovered in webcalendar, a PHP based multi-user calendar, that can lead to the disclosure of sensitive information to unauthorised parties. the old stable distribution woody does not...

CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability

Mathcad Security Vulnerability Briefing - CVE-2007-4600 Synopsis of Vulnerability ========================== The ‘Protect Worksheet’ functionality, used to protect sections Mathcad sheets from alterations, in versions 12 through 14 is easily bypassed allowing access to the protected data due to t...

Squiz MySource Matrix Unauthorised Proxy and Cross Site Scripting

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Squiz - My Source and My Source Matrix http://www.squiz.net.au "MySource Matrix is the newest version of the popular MySource CMS, purpose built for enterprise level...

[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 1047-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 790-1] New phpldapadmin packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 790-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2005 http://www.debian.org/security/faq -...

FreeBSD : ecartis -- unauthorised access to admin interface (be543d74-539a-11d9-a9e7-0001020eed82)

A Debian security advisory reports : A problem has been discovered in ecartis, a mailing-list manager, which allows an attacker in the same domain as the list admin to gain administrator privileges and alter list settings. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SA15306] Sun StorEdge 6130 Array Unspecified Unauthorised Access

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun StorEdge 6130 Array Unspecified Unauthorised Acces...

CVE-2000-0894

WatchGuard SOHO Firewall HTTP service exposed to the private network allows administrative actions (password reset, reboot) without proper authentication, enabling denial of service or unauthorized activity. The ISS advisory details multiple issues mapped to CAN-2000-0894/0895/0896 across firmwar...