Java Applet Method Handle Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...

Portable phpMyAdmin Wordpress Plugin Authentication Bypass

No description provided by source. 'portable-phpMyAdmin WordPress Plugin' Authentication Bypass CVE-2012-5469 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- portable-phpMyAdmin doesn't verify an existing WordPress session privileged or not when...

Group Office Calendar (calendar/json.php) SQL Injection

No description provided by source. /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability locate...

BabyGekko 1.2.2e Multiple Vulnerabilities

No description provided by source. Advisory ID: HTB23122 Product: BabyGekko Vendor: babygekko.com Vulnerable Versions: 1.2.2e and probably prior Tested Version: 1.2.2e Vendor Notification: October 24, 2012 Vendor Patch: November 4, 2012 Public Disclosure: November 14, 2012 Vulnerability Type: SQL...

SAP NetWeaver Dispatcher DiagTraceR3Info Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var string2 = "BBBB"; while string2.length 500 string2 += string2; var fr = new Array; var al = new Array...

RHEL 6 : tomcat6 (RHSA-2013:0005)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0005 advisory. Apache Tomcat is a servlet container. It was found that when an application used FORM authentication, along with another component that calls...

RHEL 5 / 6 : JBoss Web Server (RHSA-2013:0268)

Updated tomcat7 packages that fix one security issue are now available for JBoss Enterprise Web Server 2.0.0 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

CVE-2012-6422

creationtimestamp| type| source ---|---|--- 2014-06-24 12:15:23+00:00| seen| MISP/53a969b9-5de0-42b3-a45e-439d950d210b 2020-10-09 17:22:05+00:00| seen| MISP/cd859b7a-5c1d-47e8-a4a1-6e3392cd4707 2020-10-09 17:30:38+00:00| seen| MISP/ca4273b3-6a01-4306-94a5-0e8d010a3fd1 2025-08-31 03:13:01+00:00|...

FreeBSD-SA-14:16.file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:16.file Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in file1 and libmagic3 Category: contrib Module: file Announced: 2014-06-24...

CVE-2012-5106

CVE-2012-5106 affects FreeFloat FTP Server 1.0. The vulnerability is a stack-based buffer overflow in the handling of the PUT command, allowing remote authenticated users to execute arbitrary code by sending a long string. Exploitation exists (e.g., Exploit-DB entry 22351) and has been demonstrat...

openssl security update

Package: openssl Version: 0.9.8o-4squeeze16 CVE ID: CVE-2014-0224 CVE-2012-4929 CVE-2014-0224 This update updates the upstream fix for CVE-2014-0224 to address problems with renegotiation under some conditions. original text: KIKUCHI Masashi discovered that carefully crafted handshakes can force...

openssl security update

Package: openssl Version: 0.9.8o-4squeeze16 CVE ID: CVE-2014-0224 CVE-2012-4929 CVE-2014-0224 This update updates the upstream fix for CVE-2014-0224 to address problems with renegotiation under some conditions. original text: KIKUCHI Masashi discovered that carefully crafted handshakes can force...

CVE-2012-0273

CVE-2012-0273 describes multiple stack-based buffer overflows in MinaliC 2.0.0, allowing remote code execution via (1) a session_id cookie in the get_cookie_value function of response.c, (2) a directory name in add_default_file in response.c, or (3) a file name in retrieve_physical_file_name_or_b...

CVE-2012-2579

CVE-2012-2579 concerns the WordPress plugin WP SimpleMail (version 1.0.6) which is affected by stored XSS via the email fields To, From, Date and Subject. The vulnerability arises from insufficient input sanitization when these fields are displayed, enabling an attacker to inject arbitrary script...

CVE-2012-2591

CVE-2012-2591 affects EmailArchitect Email Server 10.0 and 10.0.0.3. The vulnerability is cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the From or Date fields in an email. Root cause is improper input handling in these fields (XSS). Impact per...

CVE-2012-2580

Postie WordPress plugin (v1.4.3, possibly prior to v1.5.15) is affected by a stored XSS vulnerability (CVE-2012-2580). An attacker can inject arbitrary JavaScript via the From field of an emailed message, leading to script execution in the victim’s browser on the affected site. The root cause is ...

CVE-2012-2052

Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the contributor comments...

CVE-2012-2052

CVE-2012-2052 affects Adobe Photoshop CS5 (12.x) before 12.0.5 and CS5.1 (12.1.x) before 12.1.1, due to a stack-based buffer overflow in the U3D.8BI library plugin. The vulnerability can be triggered by processing a crafted Collada (.dae) asset, specifically via a long Collada asset element in th...

CVE-2012-2572

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...