7484 matches found
flatnux 2009-03-27 (upload/id) Multiple Vulnerabilities
No description provided by source. Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File:...
ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)
No description provided by source. Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ?2010-03-30 Tested on: xp sp3 my $shellcod...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit
No description provided by source. / GNU PeerCast = v0.1216 Remote Exploit ====================================== PeerCast is a simple, free way to listen to radio and watch video on the internet. A remotely exploitable buffer overflow has been identified by INFIGO-2006-03-01 which can be...
[oss-security] CVE request: Proxmox VE < 3.2 user enumeration vulnerability
Hi list, We recently found a vulnerability affecting Proxmox VE 3.2 that allows an unauthenticated user to perform user enumeration. Vendor was contacted and the vulnerability fixed in Proxmox VE 3.2, released on 2014-03-10. References: Proxmox related commits:...
openSUSE Security Update : otrs (openSUSE-SU-2014:0360-1)
The OTRS ticket system was updated to 3.1.20 / 3.2.15 : On openSUSE 12.3 it was updated to 3.1.20: fix for OSA-2014-03, CVE-2014-1695 - Improved HTML filter. - 3.1.19 2014-01-28 - Fixed bug10158 - Missing quoting in State::StateGetStatesByType. - Fixed bug10099 - Missing challenge token checks on...
Horde Webmail 5.1 - Open Redirect Vulnerability
Exploit for php platform in category web applications + Horde webmail - Open Redirect Vulnerability + Date: 31/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.horde.org/apps/webmail + Contact: email protected + Tested on: Windows 7 and Linux +...
jetVideo 8.1.1 Basic (.wav) Local Crash PoC
Exploit for windows platform in category dos / poc !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: jetVideo 8.1.1 Basic .wav Local Crash PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.jetaudio.com/download/jetvideo.html + Friendly Sites...
EDITStuff 6 Command Execution
Remote Comand Execution on EDITStuff + Date: 22/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage : http://editstuff.com/ + Contact: [email protected] + Tested on Windows 7 and Linux + Vulnerable File: editstuff.cgi + Version : all + Exploit:...
CVE-2013-7346
creationtimestamp| type| source ---|---|--- 2014-03-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39136...
BigDump 0.35b - Arbitrary File Upload
BigDump 0.35b - Arbitrary File Upload + Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php +...
innoEDIT 6.2 Remote Command Execution
Remote Comand Execution on innoEDIT + Date: 21/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage : http://www.inno.com.mx/innoedit.htm + Contact: [email protected] + Tested on Windows 7 and Linux + Vulnerable File: innoedit.cgi + Version : Version 6.2 + Exploit:...
CVE-2014-2044
creationtimestamp| type| source ---|---|--- 2014-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32162...
Mozilla Firefox 27 release (important)
Mozilla Firefox was updated to version 27. Mozilla Seamonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27. The Firefox 27 release brings TLS 1.2 support as a major security feature. It also fixes following...
Adobe Digital Editions < 3.0 (APSB14-03)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 3.0. It is, therefore, affected by a vulnerability as referenced in the APSB14-03 advisory. - Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corrupti...
Skybluecanvas CMS 1.1 r248-03 - Remote Command Execution
Vulnerability in SkyBlueCanvas CMS Vulnerability Type: Remote Command Injection Version Affected: 1.1 r248-03 and probably prior versions Discovered by: Scott Parish - Center for Internet Security Vendor Information: SkyBlueCanvas is an easy-to-use Web Content Management System, that makes it...
Solaris 10 (x86) : 147090-03 (deprecated)
Oracle Solaris Cluster 3.3: HA-SAP Patch for Oracle Solaris 10x86. Date this patch was last updated by Sun : Mar/12/13 This plugin has been deprecated and either replaced with individual 147090 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Solaris 10 (sparc) : 147087-03 (deprecated)
Oracle Solaris Cluster 3.3: HA-LiveCache Patch for Oracle Solaris. Date this patch was last updated by Sun : Mar/12/13 This plugin has been deprecated and either replaced with individual 147087 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Solaris 10 (sparc) : 125725-03 (deprecated)
X11 6.6.2: xinerama patch. Date this patch was last updated by Sun : Sep/12/13 This plugin has been deprecated and either replaced with individual 125725 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...
Solaris 10 (x86) : 143318-03 (deprecated)
GNOME 2.6.0x86: Instant Messaging patch. Date this patch was last updated by Sun : Nov/30/10 This plugin has been deprecated and either replaced with individual 143318 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...
Slackware 14.0 / 14.1 / current : llvm (SSA:2013-350-03)
New llvm packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-350-03. The text itself is copyright C...