FreeWebShop versions 2.2.9 R2 and below remote code execution exploit that leverages ajax_save_name.php.
54fc69534b6de9553e10af1d006f73f8e25e1e441624950268bd042a1a4ad066Attachmate Reflection FTP client suffers from a heap overflow vulnerability. Metasploit module included.
d7519a6bb8e2eb7868f507a448deea4430ef3465d8311c31c0fd75536a64a723FleaHttpd suffers from a remote denial of service vulnerability.
9badb22c64d9e1ded045b4b9fcd6838c15cccff2dbc9548993ded78aba438330Secunia Security Advisory - A vulnerability has been reported in Colasoft Capsa, which can be exploited by malicious people to cause a DoS (Denial of Service).
ef15a186395119949f0b6f6a64a2c030d5abefccbe1150685f1271ea93f80617Secunia Security Advisory - Miroslav Stampar has discovered two vulnerabilities in the WP e-Commerce plugin for WordPress, which can be exploited by malicious people to conduct SQL injection attacks.
8453a5e990a45ba5c29382e815176ec2c9e0ce937dbdeb74a0ab8700d58cbfddSecunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, and compromise a user's system.
746919466321d5f909aeba44cdd6f4aaeda224085fe304060f0057e7773ff65dSecunia Security Advisory - A security issue and a vulnerability have been reported in InduSoft Web Studio, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
ac9720e953ee1afddc70561c9cacc96f26f37e7c78c2cacff572dd52b5fd5a83Secunia Security Advisory - A security issue and a vulnerability have been reported in InduSoft Web Studio, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
f3a791f9fc4357d8244cc0c98a1317492deb56d783d43e794b3f71d53405739eSecunia Security Advisory - Stefan Schurtz has reported a vulnerability in Papoo Light, which can be exploited by malicious people to conduct cross-site scripting attacks.
af7a57841f4632103ebed49b21d4207ad2894569647686e9d3d6493d71b32171Secunia Security Advisory - Luigi Auriemma has discovered a vulnerability in RSLogix 5000, which can be exploited by malicious people to compromise a vulnerable system.
33016fa6213e3caa0eac76ea69a66783b73bffe306cb206d2b0f125fc794da1bSecunia Security Advisory - Blue Coat has acknowledged multiple vulnerabilities in Blue Coat Director, which can be exploited by malicious people to gain access to sensitive information, conduct cross-site scripting attacks, bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.
046bbb974b9ab3c62a970c3688e54750943a9dd24ee7c516546bcc76716cdbb1Secunia Security Advisory - Two vulnerabilities have been reported in multiple EMC Ionix products, which can be exploited by malicious people to compromise a vulnerable system.
4473d4077183364e7bfce2ecaa5385892ee5e3d8f1e162e1bf291180e04ca5d4Secunia Security Advisory - SUSE has issued an update for radvd. This fixes multiple security issues and vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to cause a DoS (Denial of Service).
a42710100326bc2646c38f52d811e6abdcdd9094a38f0e9b5fd7f86a1e06e90fSecunia Security Advisory - A security issue has been reported in LightDM, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
0242346e46a52801010873df8e39ba604f70e27a938e85a99517b7a9897f7bccSecunia Security Advisory - A vulnerability has been reported in ISC BIND, which can be exploited by malicious people to cause a DoS (Denial of Service).
f6fb4fba19c7e43e174f9b28cb038ac0ed3fe1fd38c8132333ec757a891bf3f6Secunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and potentially compromise a user's system.
eadfbd730f4c16802aa85eba2636e5c9af0d2f64298fa9d978b98be84bd9ad97Secunia Security Advisory - SUSE has issued an update for mozilla-nss. This fixes a vulnerability, which can be exploited by malicious people to compromise an application using the library.
ba138df76e5eb2e609361486520a8c22cfa4594223bae669dfd503898219f67fSecunia Security Advisory - SUSE has issued an update for radvd. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service).
17a910c74a8737424298dbd6624abd45c775e847880f726f266526e2040675bfSecunia Security Advisory - Joshua Tiago has discovered a vulnerability in LimeSurvey, which can be exploited by malicious people to conduct script insertion attacks.
e839418eb41078bc263f0eca0f492552fd67bcf4393c0ca7d9576b47991e11d5Secunia Security Advisory - A security issue has been reported in IBM WebSphere MQ, which can be exploited by malicious, local users to bypass certain security restrictions.
440f313fbb0e4db3769d918e459bbfb6060a95ebb877f4bafb7963a61f4b717dSecunia Security Advisory - Ubuntu has issued an update for lightdm. This fixes two security issues, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
bd4509e8a341be1090c1e954f5fc4064658693beb6dcba3e57a430f4eb2440cfSecunia Security Advisory - Alex Plaskett has reported a vulnerability in HTC HD7, which can be exploited by malicious people to bypass certain security restrictions.
32bbecaa050cdfca0c9a70c7df3c22440716fa45aa5e674557aea3365dd13614Debian Linux Security Advisory 2346-1 - Several vulnerabilities were discovered in ProFTPD, an FTP server. ProFTPD incorrectly uses data from an unencrypted input buffer after encryption has been enabled with STARTTLS, an issue similar to CVE-2011-0411. ProFTPD uses a response pool after freeing it under exceptional conditions, possibly leading to remote code execution.
4e0fcf4b058513cde8c483fad69e28ac40ae4aa41d60b8770ad1d405582c34f3Ubuntu Security Notice 1262-1 - It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. It was discovered that Light Display Manager incorrectly handled links when adjusting permissions on .Xauthority files. A local attacker could exploit this issue to access arbitrary files, and possibly obtain increased privileges. In the default Ubuntu installation, this would be prevented by the Yama link restrictions. Various other issues were also addressed.
61e40ebb8859955a63f234353d30af5813f52ebbb4d3496c598362dec3d4de19Apple Security Advisory 2011-11-14-1 - iTunes 10.5.1 is now available and addresses a man-in-the-middle vulnerability. iTunes periodically checks for software updates using an HTTP request to Apple. This request may cause iTunes to indicate that an update is available. If Apple Software Update for Windows is not installed, clicking the Download iTunes button may open the URL from the HTTP response in the user's default browser. This issue has been mitigated by using a secured connection when checking for available updates. For OS X systems, the user's default browser is not used because Apple Software Update is included with OS X, however this change adds additional defense-in-depth.
0402f9695cc05ee28bbb705980abebd65df936264f8a42a2af20c358298c21ff
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed