5954 matches found
All-in-One WP Migration 2.0.2 Remote Code Execution Vulnerability
Exploit for php platform in category web applications In Ai1wmImportController::import admin priveleges ARE NOT checked. Function is imported as action: addaction‘wpajaximport’, ‘Ai1wmImportController::import’ in class-ai1wm-main-controller.php It’s possible to use it through...
Threat Outbreak Alert RuleID12531: Email Messages Distributing Malicious Software on November 23, 2014
Medium Alert ID: 36512 First Published: 2014 November 24 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12531 may contain the following files: Name |...
Updated moodle package fixes security vulnerabilities
In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...
FlatNuke <= 3.1.x BBCode IMG Tag Script Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------- + FlatNuke = 3.1.x viewnews BBCode IMG Tag Script Injection PoC ------------------------------------------------------------------------- Discovered by Juri Gianni -...
HP Data Protector EXEC_INTEGUTIL Remote Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include...
Visual Mining NetCharts Server Remote Code Execution
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
Adobe Releases Security Updates for Flash Player
Adobe has released security updates to address multiple vulnerabilities in Flash Player, one of which could potentially allow an attacker to take control of the affected system. Users and administrators are encouraged to review Adobe Security Bulletin APSB 14-24 and apply the necessary updates...
Visual Mining NetCharts Server - Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Visual Mining NetCharts Server Remote Code Execution', 'Description' = %q This module exploits multiple vulnerabilities in Visual...
Files Document And PDF 2.0.2 Command Execution / Local File Inclusion
Document Title: =============== Files Document & PDF 2.0.2 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1341 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ====================================...
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 SSLv3 protocol when using a block cipher in Cipher Block Chaining CBC mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer...
Threat Outbreak Alert RuleID11970: Email Messages Distributing Malicious Software on October 14, 2014
Medium Alert ID: 36079 First Published: 2014 October 14 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11970 may contain the following files: Name |...
Threat Outbreak Alert RuleID11965: Email Messages Distributing Malicious Software on October 14, 2014
Medium Alert ID: 36072 First Published: 2014 October 14 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11965 may contain the following files: Name |...
Threat Outbreak Alert RuleID11954: Email Messages Distributing Malicious Software on October 14, 2014
Medium Alert ID: 36069 First Published: 2014 October 14 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11954 may contain the following files: Name |...
Adobe Releases Security Updates for ColdFusion and Flash Player
Adobe has released security updates to address multiple vulnerabilities in ColdFusion and Flash Player. Exploitation could allow attackers to take control of a vulnerable system. Users and administrators are encouraged to review Adobe Security Bulletins APSB 14-23 and APSB 14-22 and apply the...
SEO Control Panel 3.6.0 - (Authenticated) SQL Injection
Exploit Title: Seo Control Panel 3.6.0 Authenticated Sql Injection Date: 10/10/2014 Exploit Author: Tiago Carvalho [email protected] or [email protected] Vendor Homepage: www.seopanel.in Software Link: http://www.seopanel.in/spdownload/ Version: Seo Panel Version 3.6.0 Tested on: Ka...
MS14-060: Vulnerability in Windows OLE could allow for remote code execution: October 14, 2014
None None...
HP Network Node Manager I PMD Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...
Solaris 10 (x86) : 126547-06
SunOS 5.10x86: bash patch. Date this patch was last updated by Sun : Sep/26/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Advantech WebAccess dvs.ocx GetColor Buffer Overflow Exploit
This Metasploit module exploits a buffer overflow vulnerability in Advantec WebAccess. The vulnerability exists in the dvs.ocx ActiveX control, where a dangerous call to sprintf can be reached with user controlled data through the GetColor function. This Metasploit module has been tested...
FreeBSD Security Advisory FreeBSD-SA-14:19.tcp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:19.tcp Security Advisory The FreeBSD Project Topic: Denial of Service in TCP packet processing Category: core Module: inet Announced: 2014-09-16 Credits:...