7484 matches found
CVE-2015-1068
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...
CVE-2015-1081
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...
Threat Outbreak Alert RuleID13928: Email Messages Distributing Malicious Software on March 11, 2015
Medium Alert ID: 37800 First Published: 2015 March 11 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13928 may contain the following files: Name | Si...
Sagem F@st 3304-V2 - Telnet Crash (PoC)
Sagem F@st 3304-V2 - Telnet Crash PoC Title : Sagem F@st 3304-V2 Telnet Crash POC Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304-V1, other versions may also be affected Date : 2015-03-08 Author : Loudiyi Mohamed Contact : [email protected] Blog :...
Threat Outbreak Alert RuleID13794: Email Messages Distributing Malicious Software on March 03, 2015
Medium Alert ID: 37705 First Published: 2015 March 3 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13794 may contain the following files: Name | Siz...
CVE-2014-9463
creationtimestamp| type| source ---|---|--- 2015-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36232...
Unfixed XSS vulnerability at www.i-mxms.com
Security researcher DevaDraco, has submitted on 27/02/2015 a cross-site-scripting XSS vulnerability affecting www.i-mxms.com, which at the time of submission ranked 20181176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...
GLSA-201502-03 : BIND: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201502-03 BIND: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can cause a denial of service condition by...
T Mobile Internet Manager - DLL Hijacking (mfc71enudll)
Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...
openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:0192-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Flash Player Double Free (APSB15-03: CVE-2015-0312)
A double free memory vulnerability has been reported in Adobe Flash Player. The issue occurs while sharing a bytearray between two workers. If one worker calls bytearray.compress while the other uses that bytearray, the code does not handle the race correctly and leads to double free, which can...
RHEL 5 / 6 : flash-plugin (RHSA-2015:0094)
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
FreeBSD-SA-15:03.sctp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:03.sctp Security Advisory The FreeBSD Project Topic: SCTP stream reset vulnerability Category: core Module: sctp Announced: 2015-01-27 Credits: Gerasimos...
Solaris 10 (x86) : 148882-03 (deprecated)
SunOS 5.10x86: xntpd patch. Date this patch was last updated by Sun : Jan/26/15 This plugin has been deprecated and either replaced with individual 148882 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Oracle Solaris Third-Party Patch Update : proftpd (cve_2011_4130_use_after)
The remote Solaris system is missing necessary patches to address security updates : - Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer...
Wordpress sumome 1.6 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress sumome 1.6 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sumome/ Software Link :https://downloads.wordpress.org/plugin/sumome.zip Date : 2015-01-0...
WordPress Download Manager 2.7.4 Remote Command Execution
!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...
Solaris 9 (sparc) : 149079-03
SunOS 5.9: bash patch. Date this patch was last updated by Sun : Sep/30/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid7811...
Livefyre LiveComments Plugin - Persistent Cross-Site Scripting
Title : Stored XSS in Livefyre LiveComments Plugin CVE : 2014-6420 Vendor Homepage : http://livefyre.com Software Link : http://web.livefyre.com/streamhub/liveComments Version : v3.0 Author : Brij Kishore Mishra Date : 03-Sept-2014 Tested On : Chrome 37, Ubuntu 14.04 Description : This plugin...