CVE-2012-1013

The check16dummy function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service NULL pointer dereference and daemon crash via a KRB5KDBDISALLOWALLTIX create request that...

Mozilla: Information disclosure though Windows file shares and shortcut files (MFSA 2012-37)

Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut aka .lnk file for display within an IFRAME...

RHEL 5 / 6 : openoffice.org (RHSA-2012:0705)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0705 advisory. OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application,...

PHP 5.3.x < 5.3.13 CGI Query String Code Execution

Binary data 801100.prm...

IM Storm SQL Injection

! Title : IM Storm SQL Injection Vulnerability ! Author : AtlasTeam ! Author Home : AtlasTeam.ir ! Contact : AtlasTeam.ir @ Gmail dot Com ! Risk Level : High ! Date : Monday, June 4, 2012 ! Vendor : imstorm.com ! Tested On : OpenBSD, Backtrack 5, Windows XP ! Vulnerability Details...

Regnum Christi SQL Injection

Regnum Christi SQL injection Exploit Title: Regnum Christi SQL injection Vulnerability Date: 01/06/2012 - 03:38 Author: KatiLhacker Software Website: http://www.regnumchristi.org Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"galeria.php?id=" $ Demo Sites:...

RHEL 5 : kernel (RHSA-2012:0690)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0690 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: It was found th...

"Object reference not set to an instance of an object" error when connecting a VMware vSphere 5 server

Challenge When you connect a VMware vSphere 5 server in the Connected VMware Servers section of the nworks Enterprise Manager Web UI, the following error occurs: Object reference not set to an instance of an object Cause Support of VMware vSphere 5 was introduced in nworks 5.7. Earlier versions o...

OpenSSL 1.0.1 Buffer Overflow

Exploit for multiple platform in category dos / poc Title ----- OpenSSL Buffer Overflow Vulnerability Severity -------- Medium Date Discovered --------------- May 22, 2012 Discovered By ------------- Vincent J. Buccigrossi III and David M. Anthony chenz9187 ATgmailCOM davidinfosecATgmailcom...

RHEL 5 : postgresql (RHSA-2012:0677)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0677 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The pgdump utility inserted object names literally into comment...

CentOS 5 : kvm (CESA-2012:0676)

Updated kvm packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Indexa SQL Injection

Exploit Title : Ýndexa SQL Injecktion Author : Th4 MasK Vendor : http://www.indexa.fr/ Date : 12.05.2012 Platform : Php Test On : BackTrack 5 // Demo Site : http://www.cfmconseils.com/formationdetail.php?id=11 SQL Exploit ;...

Critical: Red Hat Security Advisory: php security update

Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life, and Red Hat Enterprise Linux 5.6, 6.0 and 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability...

CentOS 5 : php53 (CESA-2012:0547)

Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RedHat Update for php RHSA-2012:0546-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : php53 (RHSA-2012:0547)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0547 advisory. - php: command line arguments injection when run in CGI mode VU520827 CVE-2012-1823 Note that Nessus has not tested for this issue but has instead...

CentOS 5 : ImageMagick (CESA-2012:0545)

Updated ImageMagick packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2012-1695

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2012-1695

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Information disclosure

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted URI...