New User, Welcome!     Login

Next Page >>

object oriented

Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


Re: WinAppDbg 1.4 is out!

and is integrated to PaiMei. So both frameworks have their own
advantages.

Also the programming API for PyDbg is much simpler (but still
powerful), but WinAppDbg's is more complete, documented, and object
oriented.

So if I were you, I wouldn't rush to port all my already written code
to WinAppDbg :) but if you're about to code something new you might
want to give it a try!


Joomla! 1.6.0 | SQL Injection Vulnerability

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


Joomla! 1.6.0 | Cross Site Scripting (XSS) Vulnerability

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


Joomla! 1.5.20 <= Cross Site Scripting (XSS) Vulnerability

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


[ GLSA 201001-09 ] Ruby: Terminal Control Character Injection

Background
==========

Ruby is an interpreted scripting language for quick and easy
object-oriented programming. It comes bundled with a HTTP server
("WEBrick").

Affected packages
=================


Joomla! 1.6.0 | Information Disclosure/Full Path Disclosure Vulnerability

Joomla is a free and open source content management system (CMS) for
publishing content on the World Wide Web and intranets. It comprises a
model–view–controller (MVC) Web application framework that can also be
used independently.
Joomla is written in PHP, uses object-oriented programming (OOP)
techniques and software design patterns, stores data in a MySQL
database, and includes features such as page caching, RSS feeds,
printable versions of pages, news flashes, blogs, polls, search, and
support for language internationalization.


[ GLSA 201101-06 ] IO::Socket::SSL: Certificate validation error

remote attackers to conduct man-in-the-middle attacks.

Background
==========

IO::Socket::SSL is a Perl class implementing an object oriented
interface to SSL sockets.

Affected packages
=================


iDefense Security Advisory 09.09.08: Apple QuickTime PICT Integer Overflow Vulnerability

I. BACKGROUND

Quicktime is Apple's media player product, and is used to render video
and other media. The PICT file format was developed by Apple Inc. in
1984. PICT files can contain both object oriented images and bitmaps.
For more information visit the vendor's web site at the following URL.

http://www.apple.com/quicktime/

II. DESCRIPTION

Kloxo LxCenter Server CP v6.1.10 - Multiple Web Vulnerabilities

429


Introduction:
=============
Scriptable, distributed and object oriented Hosting Platform. Manage
Clients, Resellers,
Domains, Backups, Stats, Mails and Databases. Manage everything!

(Copy of the Vendor Homepage: http://www.lxcenter.org/)


CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability

CVE Name: N/A


3. *Vulnerability Description*

eFront [1] is an easy-to-use, open source and object-oriented
multilingual eLearning platform that can be used to build learning
communities, educate and retain the end-users.

eFront is vulnerable to local file inclusion vulnerability, which
allows an external remote attacker to upload an arbitrary file and

[ GLSA 200907-16 ] Python: Integer overflows

Multiple integer overflows in Python have an unspecified impact.

Background
==========

Python is an interpreted, interactive, object-oriented programming
language.

Affected packages
=================


[ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code

Denial of Service.

Background
==========

Python is an interpreted, interactive, object-oriented programming
language.

Affected packages
=================


WinAppDbg version 1.2 is out!

The WinAppDbg python module allows developers to quickly code instrumentation
scripts in Python under a Windows environment.

It uses ctypes to wrap many Win32 API calls related to debugging, and provides
an object-oriented abstraction layer to manipulate threads, libraries and
processes, attach your script as a debugger, trace execution, hook API calls,
handle events in your debugee and set breakpoints of different kinds (code,
hardware and memory). Additionally it has no native code at all, making it
easier to maintain or modify than other debuggers on Windows.


WinAppDbg 1.4 is out!

The WinAppDbg python module allows developers to quickly code instrumentation
scripts in Python under a Windows environment.

It uses ctypes to wrap many Win32 API calls related to debugging, and provides
an object-oriented abstraction layer to manipulate threads, libraries and
processes, attach your script as a debugger, trace execution, hook API calls,
handle events in your debugee and set breakpoints of different kinds (code,
hardware and memory). Additionally it has no native code at all, making it
easier to maintain or modify than other debuggers on Windows.


WinAppDbg 1.3 is out!

It uses ctypes to wrap many Win32 API calls related to debugging, and provides

an object-oriented abstraction layer to manipulate threads, libraries and

processes, attach your script as a debugger, trace execution, hook API calls,

handle events in your debugee and set breakpoints of different kinds (code,


Invision Power Board <= 3.0.4 Local PHP File Inclusion and SQL Injection

-------------------------
Invision Power Board (IPB) is a professional forum system that has  
been built
from the ground up with speed and security in mind, taking advantage  
of object
oriented code, highly-optimized SQL queries, and the fast PHP engine. A
comprehensive administration control panel is included to help you  
keep your
board running smoothly. Moderators will also enjoy the full range of  
options
available to them via built-in tools and moderators control panel.  

XSS Vulnerability in JpGraph 3.0.6

Discovered by Martin Barbella <barbella@sas.upenn.edu>

Description of Vulnerability:
-----------------------------
JpGraph is an object oriented library for PHP that can be used to create
various types of graphs which also contains support for client side
image maps.

The GetURLArguments function for the JpGraph's Graph class does not
properly sanitize the names of get and post variables, leading to a

iDefense Security Advisory 12.07.10: Apple QuickTime PICT Memory Corruption Vulnerability

I. BACKGROUND

QuickTime is Apple's media player product used to render video and other
media. The PICT file format was developed by Apple Inc. in 1984. PICT
files can contain both object-oriented images and bitmaps. For more
information visit http://www.apple.com/quicktime/

II. DESCRIPTION

Remote exploitation of a memory corruption vulnerability in Apple Inc.'s

Re: [Full-disclosure] WinAppDbg version 1.2 is out!

Jared


> 
> It uses ctypes to wrap many Win32 API calls related to debugging, and provides
> an object-oriented abstraction layer to manipulate threads, libraries and
> processes, attach your script as a debugger, trace execution, hook API calls,
> handle events in your debugee and set breakpoints of different kinds (code,
> hardware and memory). Additionally it has no native code at all, making it
> easier to maintain or modify than other debuggers on Windows.
> 

Vulnerabilities in EViews 7.2

EViews is a software for econometric and statistical analysis.

From vendor's website:
"Estimation, forecasting, statistical analysis, graphics, simulation,
data management, all in a powerful, graphical object-oriented
interface."


#######################################################################


[ GLSA 200807-01 ] Python: Multiple integer overflows

Multiple integer overflows may allow for Denial of Service.

Background
==========

Python is an interpreted, interactive, object-oriented programming
language.

Affected packages
=================


FreeBSD Security Advisory FreeBSD-SA-08:13.protosw

I.   Background

The FreeBSD kernel provides support for a variety of different types of
communications sockets, including IPv4, IPv6, ISDN, ATM, routing protocol,
link-layer, netgraph(4), and bluetooth sockets.  As an early form of
object-oriented design, much of the functionality specific to different
types of sockets is abstracted via function pointers.

II.  Problem Description

Some function pointers for netgraph and bluetooth sockets are not

XOOPS 2.5.0 <= Cross Site Scripting Vulnerability

The XOOPS 2.5.0 and lower versions were vulnerable to Cross Site Scripting.


2. BACKGROUND

XOOPS is an acronym of eXtensible Object Oriented Portal System. It's
the #1 Content Management System (CMS) project on www.sourceforge.net
and a recipient of several awards, and constantly places as finalist
in various CMS and Open Source competitions. It incorporates many
modules such as forums, photo galleries, calendars, article management
etc.

[SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service

Problem type   : remote
Debian-specific: no
CVE Id(s)      : CVE-2008-0252

It was discovered that a directory traversal vulnerability in CherryPy,
a pythonic, object-oriented web development framework may lead to denial 
of service by deleting files through malicious session IDs in cookies.

For the stable distribution (etch), this problem has been fixed in
version 2.2.1-3etch1.


[ GLSA 200802-10 ] Python: PCRE Integer overflow

execution of arbitrary code.

Background
==========

Python is an interpreted, interactive, object-oriented programming
language.

Affected packages
=================


Metrica Service Assurance Multiple Cross Site Scripting

***********************************************************************

Summary

Metrica Service Assurance Framework implements a distributed,
object-oriented, J2EE-based architecture. It work with a Web-based
user interfaces, from end-user report generation to detailed system
administration and configuration.

***********************************************************************


[ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability

attackers to read and write arbitrary files.

Background
==========

CherryPy is a Python-based, object-oriented web development framework.

Affected packages
=================

    -------------------------------------------------------------------

Next Page>>

Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!