Oracle AutoVue - ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Zabbix 2.0.1 - Session Extractor

!/usr/bin/python import re import sys,urllib2,urllib print "\n Zabbix 2.0.1 Session Extractor 0day" print " http://www.offensive-security.com" print "\n" ''' The sessions found by this tool may allow you to access the scripts.php file. Through this web interface, an administrator can define new...

Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

GLSA-201203-18 : Minitube: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201203-18 Minitube: Insecure temporary file usage Tom Pruina reported that Minitube does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges...

e107 Tap 2.0 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WebKit跨站脚本执行过滤器安全限制绕过漏洞

BUGTRAQ ID: 53762 WebKit 是一个开源的浏览器引擎，与之相应的引擎有Gecko（Mozilla Firefox 等使用的排版引擎）和Trident（也称为MSHTML，IE 使用的排版引擎）。同时WebKit 也是苹果Mac OS X 系统引擎框架版本的名称，主要用于Safari，Dashboard，Mail 和其他一些Mac OS X 程序。 Chrome 18 beta使用的WebKit在实现上存在安全限制绕过漏洞，攻击者可利用此漏洞绕过跨站脚本执行过滤器安全限制，从而执行任意脚本代码并窃取Cookie身份验证凭证。 0 Google Chrome...

Chrome 18 Anti-XSS Bypass

Exploit Title: Chrome 18 anti-XSS bypass Date: 2012-05-31 Author: k3170makan Vendor or Software Link: download link if available Version: 18.0.1025.162 Category:: local Google dork: N/A Tested on: Ubuntu 10.04 Demo site: N/A Chrome 18---and possibly 19--- versions anti-XSS filter or XSSAuditor as...

CVE-2012-0181

creationtimestamp| type| source ---|---|--- 2012-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18894...

CVE-2011-3081

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078...

Gentoo Security Advisory GLSA 201203-18 (Minitube)

The remote host is missing updates announced in advisory GLSA 201203-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Google Releases Chrome 18, Fixes Nine Security Flaws

Google has released version 18 of its Chrome browser and has fixed a number of serious security vulnerabilities in the process. The latest version of Chrome also includes an updated release of the Flash player that now includes the background updated that enables users to set the software to upda...

Stable Channel Release and Beta Channel Update

The Chrome team is excited to announce the release of Chrome 18 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. 18.0.1025.142 contains a number of new features including faster and fancier graphics.More detailed updates are available on theChrome Blog and theChromium Blog. Securit...

Gentoo Security Advisory GLSA 201110-18 (rgmanager)

The remote host is missing updates announced in advisory GLSA 201110-18. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201201-18 (bip)

The remote host is missing updates announced in advisory GLSA 201201-18. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201201-18 (bip)

The remote host is missing updates announced in advisory GLSA 201201-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201201-18 : bip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201201-18 bip: Multiple vulnerabilities Multiple vulnerabilities have been discovered in bip: Uli Schlachter reported that bip does not properly handle invalid data during authentication, resulting in a daemon crash CVE-2010-3071...

CVE-2012-6526

creationtimestamp| type| source ---|---|--- 2012-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36574...

[SECURITY] Fedora 16 Update: jasper-1.900.1-18.fc16

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

phpMyAdmin 3.4.x < 3.4.8 XSS (PMASA-2011-18)

The version of phpMyAdmin hosted on the remote server is 3.4.x prior to 3.4.8 and is affected by a cross-site scripting vulnerability. The database name is not properly sanitized in the file 'js/dboperations.js' when attempting to rename a database. Note that this version is reportedly affected b...

Java Applet Rhino Script Engine Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' class Metasploit3 'Jav...