8749 matches found
Unfixed XSS vulnerability at www.worldwaterforum5.org
Security researcher FayHatti, has submitted on 02/06/2010 a cross-site-scripting XSS vulnerability affecting www.worldwaterforum5.org, which at the time of submission ranked 688727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It ...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
kernel: megaraid_sas permissions in sysfs
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
CVE-2009-3556
A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...
kernel: megaraid_sas permissions in sysfs
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
kernel: qla2xxx NPIV vport management pseudofiles are world writable
A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...
PT-2010-1294 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 5 with Linux kernel 2.6.18 Description: The issue concerns a Red Hat configuration step for the qla2xxx driver in the Linux kernel when N Port ID Virtualization NPIV hardware is used. This configuration sets...
SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1754 / 1760)
Indications Everyone using the Linux Kernel on x8664 architecture should update. Contraindications None. Problem description The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. The following security issues were fixed : - A underflow in the e1000...
Top Facebook, Twitter Hacks From 2009
Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...
SuSE 11.2 Security Update: kernel (2009-12-18)
The Linux kernel for openSUSE 11.2 was updated to 2.6.31.8 to fix the following bugs and security issues : - A file overwrite issue on the ext4 filesystem could be used by local attackers that have write access to a filesystem to change/overwrite files of other users, including root. CVE-2009-413...
Western Digital My Book World Edition 1.1.16 - 'lang' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40564/info My Book World Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...
Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009
Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...
acpid weak file permission
Log file is created world readable...
World Cup Email Scams on the Rise
Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. The Register...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
kernel: megaraid_sas permissions in sysfs
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
Joomla! Component Joaktree 1.0 - SQL Injection
/ ! Joomla! Joaktree component SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Developer : Niels van Dantzig + Downlo...
CVE-2009-3557
The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...
CVE-2009-3557
The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...