Debian Linux Security Advisory 2297-1 - Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client.
bf80bb2acbfee25ec2d61f3cea47b4dcc44dfe0a8b8e4b570d6578844a6e66eeOneFileCMS version 1.1.1 suffers from a remote code execution vulnerability.
568916ae1bfa0785b4f38ed90417d0bd60f364698078a6fb9c0a9e5a505ebbcdWordPress UnGallery plugin versions 1.5.8 and below suffer from a local file disclosure vulnerability.
1cdf69a881bccc8eeaa8b5bbb348a5650b9476b63df300c2e403582932f9dbcaWordPress authentication brute force and user enumeration utility for Metasploit.
53dfbc1d57cd5b6f8db8a14f4805dbb9ee5be66043bb48948f6bbf77a879d57dThis Metasploit module allows remote attackers to place arbitrary files on a users file system by abusing via Directory Traversal attack the "saveXML" method from the "XMLSimpleAccessor" class in the HP Easy Printer HPTicketMgr.dll ActiveX Control (HPTicketMgr.dll 2.7.2.0). Code execution can be achieved by first uploading the payload to the remote machine embedding a vbs file, and then upload another mof file, which enables Windows Management Instrumentation service to execute the vbs. Please note that this module currently only works for Windows before Vista.
84e0285d988e56bb5f1d65fe424e699563286b8c897e9124e79191ab37a3ba2dThis Metasploit module exploits an authentication bypass vulnerability in login.php. In conjunction with the authentication bypass issue, the 'jlist' parameter in property_box.php can be used to execute arbitrary system commands. This Metasploit module was tested against Oracle Secure Backup version 10.3.0.1.0
a6b9f81b959d5734b4b0566c794ef98effe3e6416939923022fc0bcd168099f4Symantec System Center Alert Management System is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input.
95f14312377294847b6443cafaea422eaf213f3a09cd52c6d7c601bcebfb6aeeSymantec System Center Alert Management System is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input.
232e78f8e6e5a5694a725d2f5a4b7ce93a4095155e0009240604e9174b7559f1OneFileCMS version 1.1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.
a1620e9581fa597f9b0bb5213157d28b206572797c7ad1b7886b07efbef3c4d1MediaFire suffers from a persistent cross site scripting vulnerability.
e5720e6683905d5be3a308204c542c1d01288ceb234af11b1949135a8f567d85This is a basic tutorial on web security with WordPress. Written in Indonesian.
ded0305c58bc063ac61f33521b9077d2d905297a32388dbe1b8c6632649417ee
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed