SOL14386 - BIND vulnerability CVE-2013-2266

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the table. Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to...

Mandriva Linux Security Advisory : php (MDVSA-2013:114)

Multiple vulnerabilities has been discovered and corrected in php : ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdlcachedir directive and the openbasedir directive, which allows remote attackers to bypass intended access...

Request Tracker - 'ShowPending' SQL Injection

source: https://www.securityfocus.com/bid/59022/info Request Tracker is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

SOL14316 - BIND vulnerability CVE-2012-3817

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS...

GnuTLS libgnutls Double-free Certificate List Parsing Remote DoS

Exploit for linux platform in category dos / poc CVE-2013-16631 is a possible remote DOS attack issue. This issue has been fixed2 in =GNUTLS-3.0.14. I hacked on it for hours and figure out a few prerequisites could make it vulnerable: ============================= REQUIRED: - prior to GNUTLS 3.0....

DaloRADIUS Web Management Multiple Vulnerabilities

DaloRADIUS Web Management is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Verax NMS Authenication Bypass (CVE-2013-1350)

Verax NMS Authenication Bypass CVE-2013-1350 I. BACKGROUND ---------------------- Verax NMS provides a service-oriented, unified management & monitoring of networks, applications and infrastructure enabling quick problem detection, root-cause analysis, reporting and automating recovery, reducing...

CVE-2013-1622

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is not a security issue. Further investigation showed that, because of RFC noncompliance, no version or configuration of the product had the vulnerability previously associated with this ID. Notes: none...

SOL14154 - SQL injection vulnerability from an authenticated source CVE-2012-3000

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column. Acknowledgements F5 would like to acknowledge SEC Consult Vulnerability Lab for bringing this issue to our attention, and for following the...

TomatoCart 1.x | Cross Site Request Forgery Protection Bypass via JavaScript Hijacking

OVERVIEW TomatoCart 1.x versions are vulnerable to Cross Site Request Forgery Protection Bypass. 2. BACKGROUND TomatoCart is an innovative Open Source shopping cart solution developed by Wuxi Elootec Technology Co., Ltd. It is forked from osCommerce 3 as a separate project and is released under...

Samsung Kies 2.5.0.12114_1 Buffer Overflow Vulnerability

Samsung Kies version 2.5.0.121141 suffers from a buffer overflow vulnerability. Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.5.0.121141 Tested Version: 2.5.0.121141 on Windows 7 SP1 and Internet Explorer 9.0 Vendor Notification: December 19, 2012 Vendor Patch: December...

Havalite CMS - 'comment' HTML Injection

source: https://www.securityfocus.com/bid/57169/info Havalite CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to...

LShell 0.9.15 - Remote Code Execution

LShell 0.9.15 - Remote Code Execution import paramiko import traceback from time import sleep Exploit lshell pathing vulnerability in = 0.9.15. Runs commands on the remote system. @dronesec if lensys.argv 4: print '%s: USER PW IP opt: port'%sys.argv0 sys.exit1 try: print '!...

Sourcefabric Newscoop - 'f_email' SQL Injection

source: https://www.securityfocus.com/bid/56800/info Newscoop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Cryptocat 2.0.22 - Arbitrary Script Injection

source: https://www.securityfocus.com/bid/61093/info Cryptocat is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code within the context of the application. Versions pri...

BloofoxCMS 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56353/info bloofoxCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Contao 2.11.6 Path Disclosure

title: Contao 2.11.6 Multiple vulnerabilities vulnerable version: 2.11.6 impact: medium homepage: www.contao.org found: 23.10.2012 by: aulmn Vendor description: Contao is an open source content management system CMS for people who want a professional internet presence that is easy to maintain...

VaM Shop 1.69 Cross Site Scripting / SQL Injection

Product: VaM Shop Vendor: Vamsoft http://vamshop.ru/ Vulnerable Version: 1,69 and probably prior versions. Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level: High Credit: Security Effect Teamhttp://seceffect.tumblr.com/ Vulnerability Details: 1. Blind SQL injection in...

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting

Amateur Photographers Image Gallery - plist.php?albumid Cross-Site Scripting source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update)

!/usr/bin/perl VLC Player 2.0.3 = ReadAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD...