logmein security vulnerabilities

Release date:Updated on: Affected Systems:Novell eDirectory 8.8.7.2Novell eDirectory 8.8.6.7Description:--------------------------------------------------------------------------------Bugtraq id: 57038CVE (CAN) ID: CVE-2012-0428, CVE-2012-0429, CVE-2012-0430, CVE-2012-0432Novell eDirectory is a cross-platform Directory Server.Novell eDirectory versions earlier than 8.8.8.7.2 and 8.8.6.7 have cross-site scripting, DOS, information leakage, and stack buffer overflow

French researcher Eric filior claims to have discovered a critical vulnerability in Tor's anonymous network encryption system, allowing attackers to discover hidden nodes on the network and even exploit the vulnerability to control users' computers. The vulnerability is related to Tor encryption implementation. Researchers did not disclose Attack Details. The Tor Project Foundation issued a statement to refute part of the Filiol statement, stating that his data is flawed and that his statement

Release date:Updated on: 2012-05-10 Affected Systems:Cisco Secure ACS 5.xDescription:--------------------------------------------------------------------------------Bugtraq id: 53436Cve id: CVE-2011-3293, CVE-2011-3317 Cisco Secure ACS is a central RADIUS and TACACS + server that integrates user authentication, user and administrator device access control, and policy control into a centralized unified network solution. Cisco Secure Access Control System 5.2.0.26 patch 9 and earlier versions h

Release date: 2011-11-18Updated on: 2011-11-21 Affected Systems:Pale Moon 3.6.xUnaffected system:Pale Moon 3.6.27Description:--------------------------------------------------------------------------------Pale Moon is a browser optimized based on the Firefox browser. Pale Moon has multiple vulnerabilities in implementation. Malicious users can exploit this vulnerability to leak sensitive information, execute cross-site scripts, and control user syst

Release date:Updated on: Affected Systems:WordPress FoxyPress 0.xDescription:--------------------------------------------------------------------------------FoxyPress is a free shopping cart and product management tool that integrates FoxyCart's e-commerce solutions. FoxyPress plugin for WordPress 0.4.2.5 and other versions have multiple security vulnerabilities, which can be exploited to execute cross-site

Release date: 2012-09-03Updated on: 2012-09-06 Affected Systems:FFmpeg 0.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2012-2772, CVE-2012-2774, CVE-2012-2775, CVE-2012-2776, CVE-2012-2777, CVE-2012-2779, CVE-2012-2782, CVE-2012-2783, CVE-2012-2784, CVE-2012-2785, CVE-2012-2786, CVE-2012-2787, CVE-2012-2788, CVE-2012-2789, CVE-2012-2790, CVE-2012-2791, CVE-2012-2794, CVE-2012-2795, CVE-2012-2796, CVE-2012-2797, CVE-2012-2798, CVE-2012-27

Pointter is a PHP-based content management system. Multiple security vulnerabilities in Pointter 1.2 may cause sensitive information leakage.[+] Info:~~~~~~~~~ Pointter PHP Content Management System 1.2 Multiple VulnerabilitiesVendor: PangramSoft GmbHProduct web page: http://www.pointter.comAffected version: 1.2 [+] Poc:~~~~~~~~~XSS: The stored XSS is pretty much everywhere in the admin panel, just posting

Affected System setuid Program (Linux, patch) involved program: Red Hat LinuxDescription RedHat Linux core security vulnerability affects the system's setuid ProgramDetailsVersions with vulnerabilities: Red Hat Linux 6.0 - i386 alpha sparc Red Hat Linux 6.1 - i386 alpha sparc Red Hat Linux 6.2 - i386 alpha sparc Drivers added or updated to the core in vulnerability patches:The AMI MegaRAID d

Release date:Updated on: Affected Systems:IBM Maximo Asset Management 7.xIBM Maximo Asset Management 6.xIBM Maximo Asset Management essenessen7.xIBM Maximo Asset Management Essentials 6.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-1394, CVE-2011-1395, CVE-2011-1396, CVE-2011-1397, CVE-2011-4816, CVE-2011-4817, CVE-2011-4818, CVE-2011-4819 The IBM Maximo Asset Management software provides comprehensive Asset lifecycle and maintenanc

The major security vulnerability of struts2 lies in the ONGL expression and is attacked by splicing java code in the URL.In terms of the vulnerability, struts2 implements a dynamic concatenation of java code and then dynamically compiles the code snippet to execute it.The Expression Engine considers it part of the code snippet.Tragedy! Therefore, I come to the conclusion that any function that concatenates code to dynamically compile and execute code