Microsoft Visual Studio Team Foundation Server跨站脚本执行漏洞（MS12-061)

BUGTRAQ ID: 55409 CVE ID: CVE-2012-1892 Microsoft Visual Studio Team Foundation Server是微软应用生命周期管理解决方案的核心协作平台，可实现软件递送流程自动化，包括有效管理软件开发项目的工具。 Microsoft Visual Studio Team Foundation Server存在反射XSS漏洞,可允许攻击者注入客户端脚本到IE的用户实例中或所有通过Team Foundation Server Web访问的Web浏览器中。该脚本可欺骗内容、泄露信息、以目标用户权限执行任意操作。 0 Microso...

CVE-2012-1892

Summary (CVE-2012-1892) : A cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. The issue stems from improper input handling in the TFS web interface, enabl...

Microsoft Visual Studio Team Foundation Server XSS (MS12-061; CVE-2012-1892)

A reflected XSS vulnerability has been reported in Visual Studio Team Foundation Server...

Fedora Update for libpng FEDORA-2012-1892

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SharePoint 2007 / 2010 And DotNetNuke File Disclosure

Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl...

SharePoint 20072010 and DotNetNuke 6 - File Disclosure (via XEE)

SharePoint 20072010 and DotNetNuke 6 - File Disclosure via XEE Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl...

XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke

Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...

SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)

Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl...

File disclosure via XEE in SharePoint 2007/2010 and DotNetNuke < 6

Exploit for windows platform in category web applications Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl 0day.today 2018-01-05...

CVE-2011-1892

CVE-2011-1892 targets SharePoint-related products (SharePoint Server/Workspace/ Groove components, Office Web Apps, Windows SharePoint Services, etc.). The flaw is an XXE-style vulnerability where Web Parts containing XML classes referencing external entities allow remote authenticated users to r...

CVE-2010-1892

CVE-2010-1892 is a DoS vulnerability in the Windows TCP/IP stack caused by improper handling of malformed IPv6 packets. Affected products include Windows Vista SP1/SP2, Windows Server 2008 (Gold/SP2/R2), and Windows 7. The issue arises from processing IPv6 extension headers, leading to a system h...

MS10-058: Vulnerabilities in TCP/IP Could Allow Elevation of Privilege (978886)

The TCP/IP stack installed on the remote Windows host is affected by one or more of the following vulnerabilities : - An error exists in the Windows TCP/IP stack when processing specially crafted IPv6 packets with a malformed extension header that could cause the affected system to stop respondin...

Debian DSA-1892-1 : dovecot - buffer overflow

It was discovered that the SIEVE component of dovecot, a mail server that supports mbox and maildir mailboxes, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the dovecot system user. An attacker who is able to install SIEVE scripts...

Debian DSA-1833-1 : dhcp3 - several vulnerabilities

Several remote vulnerabilities have been discovered in ISC's DHCP implementation : - CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. - CVE-2009-1892 Christoph Biedl...

Mandriva Security Advisory MDVSA-2009:312 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:312. OpenVAS Vulnerability Test $Id: mdksa2009312.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:312 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 11 FEDORA-2009-9075 (dhcp)

The remote host is missing an update to dhcp announced via advisory FEDORA-2009-9075. OpenVAS Vulnerability Test $Id: fcore20099075.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9075 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 11 FEDORA-2009-9075 (dhcp)

The remote host is missing an update to dhcp announced via advisory FEDORA-2009-9075. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : dhcp-4.1.0p1-4.fc11 (2009-9075)

Do not require policycoreutils when installing dhcp or dhclient packages. If you have the package installed, the /sbin/restorecon program will be used by dhclient-script and the dhcpd init script. This update to the dhcp package includes fixes for CVE-2009-0692 and CVE-2009-1892. More information...

Fedora Core 10 FEDORA-2009-8344 (dhcp)

The remote host is missing an update to dhcp announced via advisory FEDORA-2009-8344. OpenVAS Vulnerability Test $Id: fcore20098344.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8344 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Debian Security Advisory DSA 1833-2 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 1833-2. OpenVAS Vulnerability Test $Id: deb18332.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1833-2 dhcp3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...