Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-071 Microsof...

MS13-071 Microsoft Windows Theme File Handling Code Execution

This Metasploit module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows 2003. The vulnerability exists in the handling of the Screen Saver path, in the boot section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote...

Fedora 19 : mediawiki-1.21.2-1.fc19 (2013-15984)

SECURITY: Fix extension detection with 2 .'s - SECURITY: Support for the 'gettoken' parameter to action=block and action=unblock, deprecated since 1.20, has been removed. - SECURITY: Sanitize ResourceLoader exception messages - Purge upstream caches when deleting file assets. - Unit test suite...

MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-071 Microsof...

Arkeia Appliance <= 10.0.10 Multiple Vulnerabilities - Active Check

Arkeia Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WikkaWiki <= 1.3.4 XSS Vulnerability - Active Check

WikkaWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Fedora 18 : php-5.4.19-1.fc18 (2013-14985)

Version 5.4.19, 22-Aug-2013 Core : - Fixed bug 64503 Compilation fails with error: conflicting types for 'zendparse'. Laruence Openssl : - Fixed UMR in fix for CVE-2013-4248. Version 5.4.18, 15-Aug-2013 Core : - Fixed value of FILTERSANITIZEFULLSPECIALCHARS constant previously was erroneously set...

Amazon Linux AMI : nagios (ALAS-2012-50)

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in 1 Nagios 3.2.3 and 2 Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an a command action or a b hosts action. C Tenable Network Security,...

WordPress NextGen Smooth Gallery Plugin <= 1.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

Amazon Linux AMI : kernel (ALAS-2012-83)

It was found that the datalen parameter of the sockallocsendpskb function in the Linux kernel's networking implementation was not validated before use. A local user with access to a TUN/TAP virtual interface could use this flaw to crash the system or, potentially, escalate their privileges. Note...

SearchBlox Multiple Vulnerabilities (Sep 2013) - Active Check

SearchBlox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress silverOrchid Theme Cross Site Scripting Vulnerability

WordPress silverOrchid Theme is prone to xss vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...

WordPress Backupbuddy Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

DotNetNuke 6.x < 6.2.9, 7.x < 7.1.1 Redirection Weakness and XSS Vulnerabilities

DotNetNuke is prone to redirection weakness and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DotNetNuke < 10.1 DNNArticle Module SQLi Vulnerability

DotNetNuke DNNArticle module is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BigTree CMS Multiple Vulnerabilities

BigTree CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:bigtreecms:bigtreecms";...

DNN (DotNetNuke) DNNArticle Module categoryid Parameter SQL Injection

The version of DNN installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'categoryid' parameter of the 'dnnarticlerss.aspx' script. A remote, unauthenticated attacker can leverage this issue to launch a SQL...

Apache ActiveMQ < 5.9.0 Multiple Cross Site Scripting Vulnerabilities

Apache ActiveMQ is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TrustPort WebFilter help.php hf Parameter Directory Traversal

The TrustPort WebFilter administration console install listening on this port fails to sanitize user input to the 'hf' parameter of the 'help.php' script before using it to return the contents of a file. An unauthenticated, remote attacker can leverage this issue to view arbitrary files on the...

Apache Struts 2 ExceptionDelegator Arbitrary Remote Command Execution

The remote web application appears to use Struts 2, a web framework that utilizes OGNL Object-Graph Navigation Language as an expression language. Due to an error in the way that the ExceptionDelegator component handles mismatched data types, an unauthenticated, remote attacker can execute...