Transferable Remote 1.1 XSS / LFI / Command Injection

Title: ====== Transferable Remote v1.1 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=863 VL-ID: ===== 863 Common Vulnerability Scoring System: ==================================== 8.5 Introduction:...

Solaris 10 (x86) : 148082-02

SunOS 5.10x86: ibmf, hermon patch. Date this patch was last updated by Sun : Feb/07/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/07/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 10 (x86) : 148769-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...

CVE-2013-0658

creationtimestamp| type| source ---|---|--- 2013-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24474...

D-Link hedwig.cgi Buffer Overflow in Cookie Header

This module exploits an anonymous remote code execution vulnerability on several D-Link routers. The vulnerability exists in the handling of HTTP queries to the hedwig.cgi with long value cookies. This module has been tested successfully on D-Link DIR300v2.14, DIR600 and the DIR645A1FW103B11...

CubeCart 5.2.0 - cubecart.class.php PHP Object Injection

CubeCart 5.2.0 - cubecart.class.php PHP Object Injection ------------------------------------------------------------------------- CubeCart set'shipping', unserializebase64urldecode$POST'shipping'; 522. if !isset$POST'proceed' 523. httpredircurrentPage; 524. 525. User input passed through the...

CubeCart 5.2.0 - 'cubecart.class.php' PHP Object Injection

------------------------------------------------------------------------- CubeCart set'shipping', unserializebase64urldecode$POST'shipping'; 522. if !isset$POST'proceed' 523. httpredircurrentPage; 524. 525. User input passed through the $POST'shipping' parameter is not properly sanitized before...

CubeCart 5.2.0 PHP Object Injection

------------------------------------------------------------------------- CubeCart set'shipping', unserializebase64urldecode$POST'shipping'; 522. if !isset$POST'proceed' 523. httpredircurrentPage; 524. 525. User input passed through the $POST'shipping' parameter is not properly sanitized before...

CVE-2013-1408

creationtimestamp| type| source ---|---|--- 2013-02-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38297...

CVE-2012-5965

creationtimestamp| type| source ---|---|--- 2013-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24455...

RHEL 4 : acroread (RHSA-2010:0038)

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Reader allows users to view and print documents in Portable Document Form...

RHEL 5 : acroread (RHSA-2010:0037)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0037 advisory. - acroread: multiple code execution flaws APSB10-02 CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3959 - acroread: script injection...

GE Proficy Cimplicity WebView substitute.bcl Directory Traversal

This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5. Module Options msf use...

Adobe Reader Malformed JavaScript Security Bypass (APSB13-02; CVE-2013-0622)

A remote security bypass vulnerability allows attackers to bypass intended access restrictions via unspecified vectors...

Adobe Acrobat Reader Open Type Integer Overflow (APSB13-02; CVE-2013-0604)

Adobe Reader is vulnerable to an integer overflow when parsing specially crafted Open Type font files...

Adobe Acrobat Reader True Type Font Parsing Remote Code Execution (APSB13-02; CVE-2013-0623)

Adobe Acrobat Reader is vulnerable to a parsing logic error in True Type Font handling. The vulnerability is due to an out of bound memory read and write access. Successful exploitation could cause the application to crash and possibly lead to code execution...

Adobe Acrobat和Reader远程代码执行漏洞

BUGTRAQ ID: 57291 CVECAN ID: CVE-2013-0608 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Reader、Acrobat内存在释放后重用漏洞，攻击者可利用该漏洞执行任意代码。 0 Adobe Acrobat 9.x Adobe Acrobat 10.x Adobe Reader 9.x Adobe Reader 10.x 厂商补丁： Adobe...

Adobe Acrobat和Reader释放后重用远程代码执行漏洞

BUGTRAQ ID: 57289 CVECAN ID: CVE-2013-0602 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Reader、Acrobat内存在释放后重用漏洞，本地用户可利用这些漏洞执行任意代码。 0 Adobe Acrobat 9.x Adobe Acrobat 10.x Adobe Reader 9.x Adobe Reader 10.x 厂商补丁： Adobe...

Mozilla Firefox CharDistributionAnalysis::HandleOneChar全局缓冲区溢出漏洞

BUGTRAQ ID: 57199 CVECAN ID: CVE-2013-0760 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox 18的CharDistributionAnalysis::HandleOneChar内存在全局缓冲区溢出漏洞，可导致远程代码执行。 0 Mozilla Firefox 18.0 厂商补丁： Mozilla -------...

Mozilla Firefox nsSVGPathElement::GetPathLengthScale越界读取漏洞

BUGTRAQ ID: 57195 CVECAN ID: CVE-2013-0767 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox 18, ESR 17.0.1, ESR 10.0.12的nsSVGPathElement::GetPathLengthScale内存在越界读取漏洞，可导致远程代码执行。 0 Mozilla Firefox 18.0 Mozilla Firef...