[FD] WordPress Daily Edition Theme v1.6.2 SQL Injection Security Vulnerabilities

*WordPress Daily Edition Theme v1.6.2 SQL Injection Security Vulnerabilities* Exploit Title: WordPress Daily Edition Theme v1.6.2 /fiche-disque.php id Parameters SQL Injection Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Versions: v1.6.2 Tested Vers

[FD] WordPress Daily Edition Theme v1.6.2 Unrestricted Upload of File Security Vulnerabilities

*WordPress Daily Edition Theme v1.6.2 Unrestricted Upload of File Security Vulnerabilities* Exploit Title: WordPress Daily Edition Theme v1.6.2 /thumb.php src Parameter Unrestricted Upload of File Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Version

[FD] NetCat CMS Multiple HTTP Response Splitting (CRLF) Security Vulnerabilities

*NetCat CMS Multiple HTTP Response Splitting (CRLF) Security Vulnerabilities* Exploit Title: NetCat CMS Multiple CRLF Security Vulnerabilities Product: NetCat CMS (Content Management System) Vendor: NetCat Vulnerable Versions: 5.01 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version:

[FD] Webshop hun v1.062S Information Leakage (Full Path Disclosure - FPD) Security Vulnerabilities

*Webshop hun v1.062S Information Leakage (Full Path Disclosure - FPD) Security Vulnerabilities* Exploit Title: Webshop hun v1.062S /index.php termid parameter Information Leakage Security Vulnerabilities Product: Webshop hun Vendor: Webshop hun Vulnerable Versions: v1.062S Tested Version: v1.062S

[FD] Fw: Vulnerabilities in ASUS RT-G32

Hello list! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. - Affected products: - Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3

Re: [FD] Java 8u40 released: why?

On 03/ 6/15 12:02 PM, paul.sz...@sydney.edu.au wrote: I notice that Java (JDK, JRE) update 8u40 has been released. Though http://www.oracle.com/technetwork/java/javase/downloads/index.html says "this release includes important security fixes" ... My reading of the first WWW page is that only

Re: [FD] Java 8u40 released: why?

Java 8u40 includes adware on OS X for the first time ever: http://www.zdnet.com/article/oracle-extends-its-adware-bundling-to-include-java-for-macs/ Sorry for the poor quality of the link; I don't have time to find a better one. — Alex El 06/03/2015, a les 21:02, paul.sz...@sydney.edu.au va e

Re: [FD] Java 8u40 released: why?

Maybe the major change is that they’re including the Ask toolbar in all releases now, not just the windows one? :) The unwelcome Ask extension shows up as part of the installer if a Mac user downloads Java 8 Update 40 for the Mac. In my tests on a Mac running that latest release of OS X, the in

Re: [FD] Java 8u40 released: why?

Alan Coopersmith wrote (and he should know!): > Java 8u40 is a feature release that's been planned for almost a year, > not a special out of band bug fix release. > http://openjdk.java.net/projects/jdk8u/releases/8u40.html > https://blogs.oracle.com/thejavatutorials/entry/jdk_8u40_released My ob

Re: [FD] Java 8u40 released: why?

On 03/ 6/15 06:21 PM, paul.sz...@sydney.edu.au wrote: Alan Coopersmith wrote (and he should know!): Java 8u40 is a feature release that's been planned for almost a year, not a special out of band bug fix release. http://openjdk.java.net/projects/jdk8u/releases/8u40.html https://blogs.oracle.co

Re: [FD] Partial pointer leaks

On Thu, Mar 05, 2015 at 10:42:15AM -0800, Robert Święcki wrote: > I'm not sure if that's what you look for, but certain perf operations > leak one or two addresses from the kernel space in the default Ubuntu > configuration. It's possible to write a short PoC, but it might take a > few mins, instea

Re: [FD] Java 8u40 released: why?

James Hodgkinson wrote: > Maybe the major change is that they're including the Ask toolbar in > all releases now, not just the windows one? :) Indeed! > The unwelcome Ask extension shows up as part of the installer if a Mac > user downloads Java 8 Update 40 for the Mac. In my tests on a Mac > ru