mozilla -- use-after-free in HTML Editor

The Mozilla Project reports: MFSA 2013-29 Use-after-free in HTML Editor...

Fedora 16 : xen-4.1.3-6.fc16 (2012-19828)

A guest can cause xen to crash XSA-26, CVE-2012-5510 883082 An HVM guest can cause xen to run slowly or crash XSA-27, CVE-2012-5511 883084 An HVM guest can cause xen to crash or leak information XSA-28, CVE-2012-5512 883085 A PV guest can cause xen to crash and might be able escalate privileges...

Fedora 17 : xen-4.1.3-7.fc17 (2012-19717)

A guest can cause xen to crash XSA-26, CVE-2012-5510 883082 An HVM guest can cause xen to run slowly or crash XSA-27, CVE-2012-5511 883084 An HVM guest can cause xen to crash or leak information XSA-28, CVE-2012-5512 883085 A PV guest can cause xen to crash and might be able escalate privileges...

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting

SmartCMS - index.php?menuitem SQL Injection Cross-Site Scripting SmartCMS SQL Injection & Cross Site Scripting Vulnerabilities Bug discovered by Yakir Wizman AKA Pr0T3cT10n, Date: 29/11/2012 Version: ALL Vendor Link: http://smartcms.nl/ ISRAEL Author will be not responsible for any damage. SQL...

Huawei (Multiple Products) - Password Encryption

Huawei Multiple Products - Password Encryption source: https://www.securityfocus.com/bid/56510/info Multiple Huawei products are prone to a weak password encryption weakness. Successful exploits may allow an attacker to decrypt stored passwords; this may aid in further attacks. The following are...

PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities

Title: ====== PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities Date: ===== 2012-10-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=736 VL-ID: ===== 736 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...

Endpoint Protector 4.0.4.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Endpoint Protector Internal Cybsec Advisory Id: 2012-1029-Multiple Persistent XSS in Endpoint Protector Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 10/29/2012 Affected Applications: Endpoint Protector v4.0.4....

MediaRocket Local File Inclusion

---------------------------------------------------------------- MediaRocket = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : MediaRocket = Local File Inclusion Vulnerability Author : Hack Center Security Team Discovered By :...

Slackware: Security Advisory (SSA:2007-324-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Conceptronic GrabnGo Network Storage - Directory Traversal

Conceptronic GrabnGo Network Storage - Directory Traversal Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability...

Gentoo Security Advisory GLSA 201206-29 (mount-cifs)

The remote host is missing updates announced in advisory GLSA 201206-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-3625

creationtimestamp| type| source ---|---|--- 2012-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18954 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/mplayersamibof.rb 2025-10-23 21:12:56+00:00|...

CVE-2012-3835

creationtimestamp| type| source ---|---|--- 2012-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18800 2012-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20062 2020-02-20 20:41:10+00:00| seen| https://t.me/VulnerabilityNews/12632 2020-02-20...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Meinfoway - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Meinfoway - SQL Injection Vulnerability ========================================================================== Title: Meinfoway - SQL Injection Vulnerability Author...

havalite 1.0 <= CSRF Add Admin user

Exploit for php platform in category web applications » havalite 1.0 » --- Date : 29- 03- 2012 » --- Author : Expl0!Ts » --- Software Link : http://havalite.com/downloads/havalite.zip » --- Version: 1.0 » --- Category: php » --- Tested on: wind xp & ubuntu 10.10 » --- Dork : your mind 1- First Vu...

Unfixed XSS vulnerability at www.sfelipeneri.edu.ec

Security researcher UR0B0R0X, has submitted on 29/02/2012 a cross-site-scripting XSS vulnerability affecting www.sfelipeneri.edu.ec, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2015. It is...

CVE-2011-5023

creationtimestamp| type| source ---|---|--- 2011-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36496...

Cross-origin data theft using canvas and Windows D2D — Mozilla

Mozilla developer Bas Schouten reported that the introduction of the "Azure" graphics back-end on Windows in Firefox 7 re-introduced the cross-origin data theft issue reported by nasalislarvatus3000 as described in MFSA 2011-29...

WordPress Plugin Advertizer 1.0 - SQL Injection

Exploit Title: WordPress Advertizer plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $res = $wpdb-getrow"SELECT limitclicks, traceclicks FROM ".$wpdb-prefix."advvbase WHERE id = '".$POSTid."' limit 1;";...