7964 matches found
MS12-075: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: November 13, 2012
None None...
Unfixed XSS vulnerability at www.umoncton.ca
Security researcher Atmon3r, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.umoncton.ca, which at the time of submission ranked 358314 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...
Security Update for Xen (important)
Security Update for Xen Following bug and security fixes were applied: - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...
eking CMS Shell Upload
In The Name Of God eking CMS File Upload Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Name:eking CMS Vendor: http://www.eking.cc/ Date: 2012-09-13 Author: Mh0122 Thanks to: MojiRider Contact: [email protected] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= + Dork: inurl:admin/upload.php + Vulnerability...
Slackware Advisory SSA:2011-098-01 libtiff
The remote host is missing an update as announced via advisory SSA:2011-098-01. OpenVAS Vulnerability Test $Id: esoftslkssa201109801.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
CVE-2012-3294
creationtimestamp| type| source ---|---|--- 2012-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20477...
Debian: Security Advisory (DSA-2489-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201206-13 (mono mono-debugger)
The remote host is missing updates announced in advisory GLSA 201206-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Linux Kernel Sendpage Local Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
WebPageTest Arbitrary PHP File Upload
This module exploits a vulnerability found in WebPageTest's Upload Feature. By default, the resultimage.php file does not verify the user-supplied item before saving it to disk, and then places this item in the web directory accessible by remote users. This flaw can be abused to gain remote code...
XSS, Redirector and FPD vulnerabilities in WordPress
Hello 3APA3A! In June I've disclosed vulnerabilities in WordPress, which I'd present for you. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the first in series of advisories concerning...
Уязвимости в LIOOSYS CMS
Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Information Leakage уязвимостях в LIOOSYS CMS. Это польская коммерческая CMS. SQL Injection WASC-19: http://site/index.php?id=-120union20select201,version,3,4,5/ Information Leakage WASC-13: http://site/files/db.log Утечка лога ошибок запросов к...
Fedora 17 : boost-1.48.0-13.fc17 (2012-9818)
This update fixes a bug in Boost.Pool, which could under certain circumstances overflow allocated chunk size. This could have security implications for applications that use Boost pool without sanitizing pool parameters. - Boost.Locale library now contains backend code, which was left out before...
RSA SecurIDs Get Cracked In 13 Minutes
RSA SecurIDs Get Cracked In 13 Minutes Major corporations, government agencies, and small businesses all hand out RSA SecurID fob keychains to employees so that they can log in to their systems for security reasons and If you're used to seeing a device like this on a daily basis, you probably...
Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)
Wyse - Machine Remote Power Off Denial of Service Metasploit require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' =...
Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)
require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' = Msf::Exploit::Stance::Aggressive, 'Author' = '[email protected]',...
Firefox 13 Fixes Seven Security Vulnerabilities
Mozilla has fixed seven security vulnerabilities in its flagship Firefox browser, including four critical bugs. The fixes are included in Firefox 13, which was released Tuesday. Firefox 13 will download automatically for most users and be installed once users restart the browser. Among the securi...
CVE-2011-3101
Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products...
CVE-2012-4279
creationtimestamp| type| source ---|---|--- 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18874...
Solaris 10 (sparc) : 139291-02 (deprecated)
SunOS 5.10: pgadmin3 sources patch. Date this patch was last updated by Sun : Apr/13/12 This plugin has been deprecated and either replaced with individual 139291 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...