439 matches found
openSUSE Security Update : openstack (openSUSE-2013-237)
The Openstack Stack components were updated to Folsom level as of March 5th. Changes in openstack-cinder : - Update 12.3 packages to Folsom as of March 5th. This comes with security fixes and bug fixes that we need to have OpenStack work nicely. Fix bnc802278. - Update cinder-config-update.diff:...
Fedora 20 : ImageMagick-6.8.6.3-4.fc20 (2014-4969)
Build 6.8.6-3 version because soname bump happened in newer. - Concretize soname versioning. - Add Patch0: ImageMagick-6.8.7-psd-CVE.patch CVE bug fix backporting: http://www.imagemagick.org/discourse-server/viewtopic. php?f=3&t=25128&sid=ff40ad66b1f845c767aa77c7e32f9f9c&p =109901p109901 for fix...
Passwords from variables are visible in plaintext in release versioning preview
Hey Atlassians! You can see the contents of masked variables the ones with "password" in their key when you click on "Add variable to version" in release versioning configuration screen for deployment project. Steps to reproduce: 1. Create a global variable with key: "testpassword" and value "abc...
Passwords from variables are visible in plaintext in release versioning preview
Hey Atlassians! You can see the contents of masked variables the ones with "password" in their key when you click on "Add variable to version" in release versioning configuration screen for deployment project. Steps to reproduce: 1. Create a global variable with key: "testpassword" and value "abc...
Authorization
Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on 1 modifying the logging setting, 2 modifying the...
svn_users
This plugin greps every page for users of the versioning system. Sometimes the HTML pages are versioned using CVS or SVN, if the header of the versioning system is saved as a comment in this page, the user that edited the page will be saved on that header and will be added to the knowledge base...
Nmap NSE 6.01: ms-sql-info
Attempts to determine configuration and version information for Microsoft SQL Server instances. SQL Server credentials required: No will not benefit from 'mssql.username' & 'mssql.password'. Run criteria: Host script: Will always run. Port script: N/A NOTE: Unlike previous versions, this script...
minitar
minitar !RubyGems Versionshield-gemsrubygems !Covera...
Joomla! Component com_versioning - SQL Injection
Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 09 Mei 2011. Tested : Windows 7 Ultimate 32bit Bajakan. ! Dork : inurl:"comversioning" x X.P.L: ../publichtml/index.php?option=comversioning§ionid=0&+task=edit&id=SQLi --- Your Skill...!!! - Shout ...
Digital Forensics Framework v0.9.0 latest version download !
"DFF Digital Forensics Framework is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules." This is...
cvs: Heap-based buffer overflow by applying RCS file changes
Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...
Fedora 12 : java-1.6.0-openjdk-1.6.0.0-41.1.8.2.fc12 (2010-16240)
Thu Oct 7 2010 Jiri Vanek -1:1.6.0-41.1.8.2 - Imports icedtea6-1.8.2 - changed Release versioning from openjdkver to icedteaver - Resolves: rhbz533125 - Resolves: rhbz639876 - Resolves: rhbz639880 - Resolves: rhbz639897 - Resolves: rhbz639904 - Resolves: rhbz639909 - Resolves: rhbz639914 -...
Subversion: Remote execution of arbitrary code
Background Subversion is a versioning system designed to be a replacement for CVS. Description Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact A remote attacker with commit access could exploit this...
Sql injection
SQL injection vulnerability in the Versioning component comversioning 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...
CVE-2008-6481
SQL injection vulnerability in the Versioning component comversioning 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...
CVE-2008-6481
CVE-2008-6481 is a SQL injection vulnerability affecting the Versioning component (com_versioning) version 1.0.2 in Joomla! and Mambo. The issue allows remote attackers to inject arbitrary SQL commands via the id parameter in an edit task to index.php, enabling potential data disclosure or modifi...
CVE-2008-6481
SQL injection vulnerability in the Versioning component comversioning 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...
ms-sql-info NSE Script
Attempts to determine configuration and version information for Microsoft SQL Server instances. SQL Server credentials required: No will not benefit from mssql.username & mssql.password. Run criteria: Host script: Will always run. Port script: N/A NOTE: Unlike previous versions, this script will...
Design/Logic Flaw
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases...
CVE-2008-3115
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases...