7964 matches found
CVE-2013-1484
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
Vulnerability Recommended Actions BIG-IP FirePass Enterprise Manager ARX BIG-IP The following section describes affected BIG-IP components and how to protect those components from potential exploit. Mitigating the exploit for the MGMT interface and the Configuration utility The BIG-IP Configurati...
Win $13,500 bounty to hack Kim Dotcom's Mega encryption
Kim Dotcom is offering a bounty of €10,000 approx. US$13,580 to the first person who breaks its newly launched file storage service. Mega's launch last month was meet by criticism from multiple security researchers, Kim Dotcom announced a prize to the hackers last week. Kim tweeted,"Mega‘s open...
Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution
This module exploits a vulnerability in the Novell GroupWise Client gwcls1.dll ActiveX. Several methods in the GWCalServer control use user provided data as a pointer, which allows to read arbitrary memory and execute arbitrary code. This module has been tested successfully with GroupWise Client...
SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)
XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...
SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)
XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...
GE Proficy Cimplicity WebView substitute.bcl Directory Traversal
This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5. Module Options msf use...
EMC AlphaStor Device Manager Opcode 0x75 Command Injection
This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary command injection. This module has been tested successfully on EMC AlphaStor 4.0 build 116 with Windows 2003 SP2 and...
Multiple vulnerabilities in TinyBrowser
Hello 3APA3A! I want to warn you about multiple vulnerabilities in TinyBrowser for TinyMCE. These are new vulnerabilities in addition to my 2009 and 2011 advisories about Arbitrary File Upload and Code Execution vulnerabilities in TinyBrowser. It concerns as TinyBrowser, as all web applications...
CVE-2013-5123
creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086 2024-02-04 09:16:29+00:00| seen| https://t.me/ctinow/178740...
Firefox XMLSerializer Use After Free
This module exploits a vulnerability found on Firefox 17.0 use exploit/windows/browser/mozilla/firefoxxmlserializer msf undefinedfirefoxxmlserializer show actions ...actions... msf undefinedfirefoxxmlserializer set ACTION msf undefinedfirefoxxmlserializer show options ...show and set options... m...
Novell iPrint Client < 5.82 Remote Code Execution
The version of Novell iPrint Client installed on the remote host is earlier than 5.82. Such versions are affected by an unspecified remote code execution vulnerability that can be triggered via an 'op-client- interface-version' action. C Tenable Network Security, Inc. include"compat.inc"; if...
openSUSE: Security Advisory for xulrunner (openSUSE-SU-2012:0924-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-5469
creationtimestamp| type| source ---|---|--- 2012-12-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23356...
Base Solida Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Base Sólida - SQL Injection / Cross-Site Scripting Vulnerabilities Dork:...
Diseno Internet Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Diseño Internet Chile - SQL Injection / Cross-Site Scripting...
MS12-076: Description of the security update for Excel 2010: November 13, 2012
Describes the security update for Excel 2010, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076 view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS12-076: Vulnerabilities in Microsoft Excel could allow remote code execution: November 13, 2012
Fixes the vulnerabilities in Microsoft Excel that could allow remote code execution, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS12-076: Description of the security update for Excel 2007 (xlconv-x-none.msp): November 13, 2012
Describes the security update for Excel 2007 xlconv-x-none.msp, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...