DSA-3103-1 libyaml-libyaml-perl - security update

Bulletin has no description...

WordPress XCloner Plugin - Multiple Vulnerabilities

XCloner plugin is prone to multiple vulnerabilities, such as: unauthenticated remote access to backup files via easily guessable file names, arbitrary command execution and authenticated remote file access. Also, clear text MySQL password exposure through HTML text box. Solution Upgrade the plugi...

FileMaker Pro fails to verify SSL server certificates

Overview FileMaker Pro contains a function to encrypt communications with the FileMaker Server. FileMaker Pro fails to verify the SSL server certificate. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-2319. Impact A man-in-the-minddle attack may allow an attacker to...

PHP Webcam Video Conference - Multiple Vulnerabilities

No description provided by source. Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link: http://sourceforge.net/projects/phpwebcamvideoconference Solutio...

AutoCAD may insecurely load dynamic libraries

Overview AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. kaito834 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

DSA-2841-1 movabletype-opensource - cross-site scripting

Bulletin has no description...

DSA-2784-1 xorg-server - use-after-free

Bulletin has no description...

DSA-2767-1 proftpd-dfsg - denial of service

Bulletin has no description...

FileMaker Pro fails to verify SSL server certificates

Overview FileMaker Pro contains a function to encrypt communications with the FileMaker Server. FileMaker Pro fails to verify the SSL server certificate. Impact A man-in-the-minddle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Upgrade the software Upgrade to t...

PWordPress WP Topbar plugin 4.02 - Multiple Vulnerabilities

WordPress WP Topbar plugin is prone to multiple vulnerabilities such as cross-site request forgery and stored XSS. Solution Upgrade to 4.03 version...

Multiple web browsers vulnerable in processing Tranfer-Encoding header

Overview Multiple web browsers contain a vulnerability in processing the Transfer-Encoding header. Multiple web browsers contain a vulnerability in processing the Transfer-Encoding header. When viewing a malicious web site through a proxy server, part of the HTTP response may be misidentified as ...

WordPress 1 Flash Gallery Plugin - Arbitrary File Upload Exploit (Metasploit)

WordPress 1 Flash Gallery plugin is prone to a vulnerability which allows attackers to upload arbitrary files. This is because it fails to adequately clean up user-supplied input. In this way, the attackers can use this vulnerability to upload an arbitrary code and then run it in the context of t...

HTB22880: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22880 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop1.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

XSS vulnerability in BXR search

Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

Directory Manager

Directory Manager is installed and does not properly filter user input. A cracker may use this flaw to execute any command on your system. OpenVAS Vulnerability Test $Id: directorymanager.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Directory Manager's editimage.php Authors: Renaud Derais...

Directory Manager's edit_image.php

Directory Manager is installed and does not properly filter user input. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Ref:...

DSA-1639-1 twiki - command execution

Bulletin has no description...

DSA-1446-1 wireshark denial of service

Bulletin has no description...

DSA-1116 gimp - buffer overflow

Bulletin has no description...

In win2000pro on opening 3 3 8 9 It!!! - Vulnerability warning-the black bar safety net

Tried 3 3 8 9 friends should all know its itself has one big disadvantage, that is only applied to the win2000server or higher, while most individual users may be for game play reasons, will only choose win2000pro on. So if you do the broiler, then you can only choose Dameware this software?, now...