ZeroCMS version 1.0 suffers from a remote SQL injection vulnerability.
f831a98ae2728debd51bd9f3d4f68417ad02bf28fc05e3f2d77d6f978f668bd2Cisco Ironport Email Security Virtual Appliance version 8.0.0-671 suffers from a reflective cross site scripting vulnerability.
d1b0de15c0f523e767205caae099d0c47d853b36e472df77486a4cbe92b06452This tool extracts credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, and more from a pcap file or from a live interface.
6a4ebb9233e9c4bc5f6625c3d1e68f90988774a7b8b02f8e394c0e6d53a1ddedAlogoSec Fireflow version 6.3 suffers from a cross site scripting vulnerability.
578f9771a6780139081b8976123c0695314af9ef7138996af9a3f7b8ac35530aDotNetNuke ResponsiveSidebar module suffers from an arbitrary file download vulnerability.
d2a18eca5557fd7ac37984cfc633d5e1819adc5496556a9dd9fe7c90bd5955cbDotNetNuke dnnUI_NewsArticlesSlider module suffers from an arbitrary file download vulnerability.
0a9a91f0e18723382f85525e492755072449ef3bf9abfa4c8de026f56a85e040DotNetNuke EventsCalendar module suffers from an arbitrary file download vulnerability.
3d7a9f30e34c713818ca5de5a076fc692069926abfd29dc4048c41c1af9e825dDotNetNuke EasyDnnGallery module suffers from an arbitrary file download vulnerability.
49cbcaa79c381d496a37f7acb6c69c062deeb68d134fceeff29228d87cd91742DotNetNuke CodeEditor module suffers from an arbitrary file download vulnerability.
5a5d663f8bb2e5e9110900bca523187ace88247a71b97ba61565d777492ae38cDotNetNuke ASPSlideshow module suffers from an arbitrary file download vulnerability.
37fe2d18a6788c5fd3878f3e6511ca1842becb1a64fef6328d7baa98263205b4SpiceWorks IT Ticketing System versions prior to 7.2.00195 suffer from multiple persistent cross site scripting vulnerabilities.
5fb581185c4d672a3d73d498efb613f7469161c3639354d77f224fcb6b3501f7HP Security Bulletin HPSBMU03024 3 - A potential security vulnerability has been identified with HP System Management Homepage (SMH) running on Linux and Windows and HP Systems Insight Manager (SIM), components of HP Insight Control server deployment. This is the OpenSSL vulnerability known as "Heartbleed" which could be exploited remotely resulting in disclosure of information. Insight Control server deployment packages HP System Management Homepage (SMH) and HP Systems Insight Manager (SIM) and can deploy them through the below list of items. This bulletin will give you the information needed to update your HP Insight Control server deployment solution. Install HP Management Agents for Windows x86/x64 Install HP Management Agents for RHEL 5 x64 Install HP Management Agents for RHEL 6 x64 Install HP Management Agents for SLES 10 x64 Install HP Management Agents for SLES 11 x64 Revision 3 of this advisory.
38ca5ad69ec755b06d0445833bfe62d0df43899d68a3eaa46a683cf42d15b4caDebian Linux Security Advisory 2953-1 - Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with especially-crafted patch files.
65128c54f23f3be7bc60743409111c730a110acd224eaa26e43581a34550a7c5Slackware Security Advisory - New mozilla-firefox packages are available for Slackware 14.1 to fix security issues.
0171e535e82ebc9289acc7446e1cdba6c6b3aa519e007584a15a5bceac610c8cUbuntu Security Notice 2214-2 - USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a regression when using xmllint with the --postvalid option. This update fixes the problem. Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service. Various other issues were also addressed.
cb15b86d56880e8f5b1f88b1aeee509446dfd66e26b9c9ea525c14cf4d405512Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.
655415e14fb9b55f2b914706b20a8a300c05903abdf21c7c98c567be78b4cf2aeFront version 3.6.14.4 suffers from a persistent cross site scripting vulnerability.
1bfdf4e5e313b86bfab44f3a367b4a1b877f0878569acb12a689d5637c0cde75The purpose of this paper is to learn the basics of 64 bit-based buffer overflows.
92b364bc1b263acbd077dd7cedc3f52b9435792bd5f47a3ac4db9084521cb9bfXornic Contact Us form suffers from CAPTCHA bypass and cross site scripting vulnerabilities.
f7f6f5c25b99917ad641595ded915f613025726e7ddbd6dc32534152425bf990
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed