Scientific Linux Security Update : file on SL6.x i386/x86_64 (20141014)

Multiple denial of service flaws were found in the way file parsed certain Composite Document Format CDF files. A remote attacker could use either of these flaws to crash file, or an application using file, via a specially crafted CDF file. CVE-2014-0237, CVE-2014-0238, CVE-2014-3479,...

file security and bug fix update

5.04-21 - fix typographical error in changelog 5.04-20 - fix 1037279 - better patch for the bug from previous release 5.04-19 - fix 1037279 - display 'from' field on 32bit ppc core 5.04-18 - fix 664513 - trim white-spaces during ISO9660 detection 5.04-17 - fix CVE-2014-3479 cdfcheckstreamoffset...

[SECURITY] Fedora 20 Update: gtk3-3.10.9-2.fc20

GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets, GTK+ is suitable for projects ranging from small one-off tools to complete application suites. This package contains version 3 of GTK+...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt31

3:11-alt31 built July 16, 2014 Sergey V Turchin in task 125148 --- July 16, 2014 Sergey V Turchin - new version ALT30190 - security fixes: CVE-2014-0537, CVE-2014-0539, CVE-2014-4671...

Thwboard Beta 2.8 v_profile.php user Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...

WHMCS 3.x.x (clientarea.php) Local File Disclosure

No description provided by source. Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com...

Open Realty 2.x and 3.x Persistent XSS Vulnerability

No description provided by source...

Thwboard Beta 2.8 misc.php userid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...

Three Pillars Help Desk 3.0 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------- Help Desk Version 3 Auth Bypass Remote Sql Injection -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

Novell Access Management SSLVPN Server Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricted within VPN access...

Luckybot 3 DIR Parameter Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21765/info Multiple remote file-include vulnerabilities affect Luckybot because the application fails to properly sanitize user-supplied input before using it in a PHP 'include' function call. An attacker may leverage the...

Thwboard Beta 2.8 calendar.php year Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...

NetauctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15737/info NetAuctionHelp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

Check Point Software Firewall-1 3.0 Script Tag Checking Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutable by the browser. In version 3,...

Netbutikker <= 4 - Remote SQL Injection Vulnerabilities

No description provided by source. Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and...

TClanPortal <= 1.1.3 (id) Remote SQL Injection Exploit

No description provided by source. TClanPortal Version 3 .. Search By Google :- by TriggerTG.de 2003 - Version 3 Gr33tz :- Abducter .. SQL Injection's FOunder - | [email protected] |- Devil-00 .. SQL Injection's Exploting - | [email protected] | - Security4Arab .. A'Where Home .. WE LOVE...

PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16887/info PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attac...

WHMCompleteSolution (cart.php) 3.x.x - 4.0.x Local File Disclosure

No description provided by source. Title : WHMCompleteSolution cart.php Local File Disclosure Author : Lagripe-Dz Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 10/01/2011 Version : 3.x.x , 4.0.x Tested on : linux+apache...

MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

No description provided by source. ============================================================================================== MyAlbum = 3.02 langsdir Remote File Inclusion Vulnerability =============================================================================================== Critical...

(RHSA-2014:0463) Low: Red Hat Enterprise Linux OpenStack Platform 3.0 - 90 Day Retirement Notice

In accordance with the Red Hat Enterprise Linux OpenStack Platform Support Policy, the one-year life cycle of Production Support for version 3 will end on July 31, 2014. On August 1, 2014, Red Hat Enterprise Linux OpenStack Platform version 3 will enter an inactive state and will no longer receiv...