Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 61 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 61.0.3163.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2015-5113

CVE-2015-5113 is a use-after-free vulnerability in Adobe Reader/Acrobat (10.x, 11.x and DC variants) on Windows and OS X. The flaw allows an attacker to run arbitrary code via unspecified vectors by exploiting memory management in the application’s handling of objects, as described across linked ...

CVE-2015-5095

CVE-2015-5095 is a use-after-free vulnerability in Adobe Reader and Acrobat (Windows/macOS) affecting Adobe Reader/Acrobat 10.x before 10.1.15, 11.x before 11.0.12, and DC Classic before 2015.006.30060 / DC Continuous before 2015.008.20082. It allows attackers to execute arbitrary code via unspec...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

Joomla Component com_techfolio SQL Injection (CVE-2011-5113)

An SQL injection vulnerability has been reported in Joomla Com Techfolio. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-5113

CVE-2014-5113 describes multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 9.7i. The weakness arises on test.php where unsanitized GET parameters (including testtype, ver, cm, map, lines, pps, bpp, codec, provtext, provtextextra, provlink, duration) can be explo...

Fritz!Box Webcm Unauthenticated Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

PRADO PHP Framework 3.2.0 File Read

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability Vendor: Prado Software Product web page: http://www.pradosoft.com Affected version: 3.2.0 r3169 Summary: PRADO is a component-based and event-driven programming framework for developing Web applications in PHP 5. PRADO stands for PHP Rap...

CVE-2011-5113

SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio comtechfolio component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2011-5113

CVE-2011-5113 affects Joomla! Techfolio (com_techfolio) 1.0. An SQL injection vulnerability is present in frontend/models/techfoliodetail.php, allowing remote attackers to execute arbitrary SQL commands via the catid parameter. Impact is partial confidentiality, integrity, and availability per th...

CVE-2009-5113

The CVE-2009-5113 entry describes a cross-site scripting (XSS) vulnerability in WebGlimpse, specifically in the wgarcmin.cgi component of WebGlimpse 2.18.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. The available sources (NVD/NVD m...

CVE-2011-5113

creationtimestamp| type| source ---|---|--- 2011-10-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18042...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5113

WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery CSRF attacks via crafted cookies, as demonstrated by attacks that 1 delete user accounts or 2 cause a...

Unfixed XSS vulnerability at www.eurogamer.net

Security researcher SaMTHG, has submitted on 19/10/2008 a cross-site-scripting XSS vulnerability affecting www.eurogamer.net, which at the time of submission ranked 5113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2009. It is currentl...

CVE-2007-5113

CVE-2007-5113 affects Google Urchin 5 (<= 5.7.03) where report.cgi allows remote attackers to bypass authentication and access sensitive information (web server logs) by modifying query parameters such as profile, rid, prefs, n, vid, bd, ed, dt, and gtype. The vulnerability is related to an au...

CVE-2006-5113

The CVE-2006-5113 entry concerns Yuuki Yoshizawa Exporia 0.3.0, where a directory traversal vulnerability in common.php allows remote inclusion and execution of local files via a .. in the lan parameter to includes.php. The described impact aligns with partial confidentiality, integrity, and avai...