8001 matches found
Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution
This module exploits a vulnerability in the Novell GroupWise Client gwcls1.dll ActiveX. Several methods in the GWCalServer control use user provided data as a pointer, which allows to read arbitrary memory and execute arbitrary code. This module has been tested successfully with GroupWise Client...
SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)
XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...
SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)
XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...
GE Proficy Cimplicity WebView substitute.bcl Directory Traversal
This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5. Module Options msf use...
EMC AlphaStor Device Manager Opcode 0x75 Command Injection
This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary command injection. This module has been tested successfully on EMC AlphaStor 4.0 build 116 with Windows 2003 SP2 and...
Multiple vulnerabilities in TinyBrowser
Hello 3APA3A! I want to warn you about multiple vulnerabilities in TinyBrowser for TinyMCE. These are new vulnerabilities in addition to my 2009 and 2011 advisories about Arbitrary File Upload and Code Execution vulnerabilities in TinyBrowser. It concerns as TinyBrowser, as all web applications...
CVE-2013-5123
creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086 2024-02-04 09:16:29+00:00| seen| https://t.me/ctinow/178740...
Firefox XMLSerializer Use After Free
This module exploits a vulnerability found on Firefox 17.0 use exploit/windows/browser/mozilla/firefoxxmlserializer msf undefinedfirefoxxmlserializer show actions ...actions... msf undefinedfirefoxxmlserializer set ACTION msf undefinedfirefoxxmlserializer show options ...show and set options... m...
Novell iPrint Client < 5.82 Remote Code Execution
The version of Novell iPrint Client installed on the remote host is earlier than 5.82. Such versions are affected by an unspecified remote code execution vulnerability that can be triggered via an 'op-client- interface-version' action. C Tenable Network Security, Inc. include"compat.inc"; if...
openSUSE: Security Advisory for xulrunner (openSUSE-SU-2012:0924-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-5469
creationtimestamp| type| source ---|---|--- 2012-12-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23356...
Base Solida Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Base Sólida - SQL Injection / Cross-Site Scripting Vulnerabilities Dork:...
Diseno Internet Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Diseño Internet Chile - SQL Injection / Cross-Site Scripting...
MS12-076: Description of the security update for Excel 2010: November 13, 2012
Describes the security update for Excel 2010, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076 view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS12-076: Description of the security update for Excel 2007 (xlconv-x-none.msp): November 13, 2012
Describes the security update for Excel 2007 xlconv-x-none.msp, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS12-076: Vulnerabilities in Microsoft Excel could allow remote code execution: November 13, 2012
Fixes the vulnerabilities in Microsoft Excel that could allow remote code execution, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS12-075: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: November 13, 2012
None None...
MS12-073: Description of the security update for Internet Information Services 7.5: November 13, 2012
None None...
Unfixed XSS vulnerability at www.umoncton.ca
Security researcher Atmon3r, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.umoncton.ca, which at the time of submission ranked 358314 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...
Security Update for Xen (important)
Security Update for Xen Following bug and security fixes were applied: - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...