angularjs security vulnerabilities

Release date:Updated on: 2012-11-19 Affected Systems:BugTracker. NET 3.5.8Description:--------------------------------------------------------------------------------Bugtraq id: 56566 BugTracker. NET is a Web-based open-source Bug tracking system. BugTracker.. NET 3.5.8 and other versions have multiple SQL injection, information leakage, cross-site scripting, and HTTP Response isolation vulnerabilities. Attackers can exploit these

Release date:Updated on: Affected Systems:Novell eDirectory 8.8.7.2Novell eDirectory 8.8.6.7Description:--------------------------------------------------------------------------------Bugtraq id: 57038CVE (CAN) ID: CVE-2012-0428, CVE-2012-0429, CVE-2012-0430, CVE-2012-0432Novell eDirectory is a cross-platform Directory Server.Novell eDirectory versions earlier than 8.8.8.7.2 and 8.8.6.7 have cross-site scripting, DOS, information leakage, and stack buffer overflow

French researcher Eric filior claims to have discovered a critical vulnerability in Tor's anonymous network encryption system, allowing attackers to discover hidden nodes on the network and even exploit the vulnerability to control users' computers. The vulnerability is related to Tor encryption implementation. Researchers did not disclose Attack Details. The Tor Project Foundation issued a statement to refute part of the Filiol statement, stating that his data is flawed and that his statement

Release date:Updated on: 2012-05-10 Affected Systems:Cisco Secure ACS 5.xDescription:--------------------------------------------------------------------------------Bugtraq id: 53436Cve id: CVE-2011-3293, CVE-2011-3317 Cisco Secure ACS is a central RADIUS and TACACS + server that integrates user authentication, user and administrator device access control, and policy control into a centralized unified network solution. Cisco Secure Access Control System 5.2.0.26 patch 9 and earlier versions h

Release date: 2011-11-18Updated on: 2011-11-21 Affected Systems:Pale Moon 3.6.xUnaffected system:Pale Moon 3.6.27Description:--------------------------------------------------------------------------------Pale Moon is a browser optimized based on the Firefox browser. Pale Moon has multiple vulnerabilities in implementation. Malicious users can exploit this vulnerability to leak sensitive information, execute cross-site scripts, and control user syst

Release date:Updated on: Affected Systems:WordPress FoxyPress 0.xDescription:--------------------------------------------------------------------------------FoxyPress is a free shopping cart and product management tool that integrates FoxyCart's e-commerce solutions. FoxyPress plugin for WordPress 0.4.2.5 and other versions have multiple security vulnerabilities, which can be exploited to execute cross-site

Release date: 2012-09-03Updated on: 2012-09-06 Affected Systems:FFmpeg 0.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2012-2772, CVE-2012-2774, CVE-2012-2775, CVE-2012-2776, CVE-2012-2777, CVE-2012-2779, CVE-2012-2782, CVE-2012-2783, CVE-2012-2784, CVE-2012-2785, CVE-2012-2786, CVE-2012-2787, CVE-2012-2788, CVE-2012-2789, CVE-2012-2790, CVE-2012-2791, CVE-2012-2794, CVE-2012-2795, CVE-2012-2796, CVE-2012-2797, CVE-2012-2798, CVE-2012-27

Pointter is a PHP-based content management system. Multiple security vulnerabilities in Pointter 1.2 may cause sensitive information leakage.[+] Info:~~~~~~~~~ Pointter PHP Content Management System 1.2 Multiple VulnerabilitiesVendor: PangramSoft GmbHProduct web page: http://www.pointter.comAffected version: 1.2 [+] Poc:~~~~~~~~~XSS: The stored XSS is pretty much everywhere in the admin panel, just posting

Affected System setuid Program (Linux, patch) involved program: Red Hat LinuxDescription RedHat Linux core security vulnerability affects the system's setuid ProgramDetailsVersions with vulnerabilities: Red Hat Linux 6.0 - i386 alpha sparc Red Hat Linux 6.1 - i386 alpha sparc Red Hat Linux 6.2 - i386 alpha sparc Drivers added or updated to the core in vulnerability patches:The AMI MegaRAID d

Release date:Updated on: Affected Systems:IBM Maximo Asset Management 7.xIBM Maximo Asset Management 6.xIBM Maximo Asset Management essenessen7.xIBM Maximo Asset Management Essentials 6.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-1394, CVE-2011-1395, CVE-2011-1396, CVE-2011-1397, CVE-2011-4816, CVE-2011-4817, CVE-2011-4818, CVE-2011-4819 The IBM Maximo Asset Management software provides comprehensive Asset lifecycle and maintenanc

The major security vulnerability of struts2 lies in the ONGL expression and is attacked by splicing java code in the URL.In terms of the vulnerability, struts2 implements a dynamic concatenation of java code and then dynamically compiles the code snippet to execute it.The Expression Engine considers it part of the code snippet.Tragedy! Therefore, I come to the conclusion that any function that concatenates code to dynamically compile and execute code

security risks, because the domain can still be resolved by the parser again and remains available until the next TTL expires. Generally, this is not a big problem, because the TTL value takes effect for a very short time, so the attack domain may only exist for several seconds or several minutes. In this article, we will discuss the recent DNS vulnerabilities in most DNS servers. This vulnerability was di

Affected Systems: PhpShop 0.6.1-B Detailed description: PhpShop is a PHP-based e-commerce program that can easily expand WEB functions. PhpShop has multiple security issues. Remote attackers can exploit these vulnerabilities to attack the database, obtain sensitive information, and execute arbitrary script code. The specific problems are as follows: 1. SQL injection vulnerability: When updating a sess

Open 360 security guards, click on the "bug repair" software will scan itself and fix the vulnerability. Then how to set up the software does not own the vulnerability of the scan and repair, but artificial operation? The solution is as follows: First click "Settings" below the vulnerability repair interface. Set "Scan prompt and Repair mode", select "Do not scan for high risk vulnerabilities." Yo

Release date:Updated on: Affected Systems:Google Chrome 17.xDescription:--------------------------------------------------------------------------------Bugtraq id: 52271Cve id: CVE-2011-3031, CVE-2011-3032, CVE-2011-3033, CVE-2011-3034, CVE-2011-3035, CVE-2011-3036, CVE-2011-3037, CVE-2011-3038, CVE-2011-3039, CVE-2011-3040, CVE-2011-3041 Google Chrome is Google's open-source browser. Google Chrome versions earlier than 17.0.963.65 have multiple security