CVE-2013-5594

Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding...

CVE-2013-3722

creationtimestamp| type| source ---|---|--- 2020-02-17 20:36:10+00:00| seen| https://t.me/cibsecurity/9872...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

UBUNTU-CVE-2013-7324

Webkit-GTK 2.x any version with HTML5 audio/video support based on GStreamer allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration...

CVE-2013-3738

creationtimestamp| type| source ---|---|--- 2020-02-17 18:36:25+00:00| seen| https://t.me/cibsecurity/9869...

CVE-2013-7324

WebKit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) is reported to allow remote attackers to trigger unexpectedly high sound volume through malicious JavaScript. The description notes this behavior complies with existing W3C standards and GNOME desktop integration pract...

CVE-2013-3722

A Denial of Service infinite loop exists in OpenSIPS before 1.10 in lookup.c...

CVE-2013-3722

OpenSIPS vulnerability CVE-2013-3722 affects the OpenSIPS project prior to version 1.10, in the file lookup.c. The root cause is an infinite loop that can cause a Denial of Service, impacting availability (per CVSS scores: CVSS27.5? actually 5.0/7.5; availability impact listed as PARTIAL/HIGH). T...

CVE-2013-3738

The CVE-2013-3738 entry concerns Zabbix 2.0.6 with a File Inclusion vulnerability in CGI scripts caused by inadequate sanitization of request strings. The vulnerability could let a remote attacker execute arbitrary code on affected systems. Reported impact in CVSS terms includes high/critical sev...

Diamorphine Rootkit Signal Privilege Escalation

This module uses Diamorphine rootkit's privesc feature using signal 64 to elevate the privileges of arbitrary processes to UID 0 root. This module has been tested successfully with Diamorphine from master branch 2019-10-04 on Linux Mint 19 kernel 4.15.0-20-generic x64. This module requires...

CVE-2013-7287

MobileIron VSP 5.9.1 and Sentry 5.0 has an insecure encryption scheme...

CVE-2013-6360

TRENDnet TS-S402 has a backdoor to enable TELNET...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

Hardcoded credentials

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

CVE-2013-4791

CVE-2013-4791 affects PrestaShop versions before 1.4.11. Multiple connected sources (GHSA/OSV/CNVD/NVD/CVE lists) describe a stored XSS in TinyMCE exploitable by Logistician/low-privilege accounts. The vulnerability allows authenticated low-privilege users to inject persistent script via the Tiny...

CVE-2013-5212

Cross-site Scripting XSS in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file...

CVE-2013-5212

CVE-2013-5212 affects the easyXDM library (pre-2.4.18). The Flash transport implemented in easyxdm.swf could be fed injected parameters via ExternalInterface.call(), enabling XSS in HTML documents that use EasyXDM.Socket/Rpc. The vulnerability arises from improper encoding of inputs sent to the F...

CVE-2013-5687

Technical details for CVE-2013-5687 are not publicly available in the provided documents. No affected product versions, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2013-6277

CVE-2013-6277 affects QNAP VioCard 300 and is documented to have hardcoded RSA private keys. The connected records confirm this credential exposure, but do not provide specific exploit details, affected firmware versions, root-cause analysis, or remediation steps. Exploitation status and concrete...