CVE-2014-3015

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2014-2429

Technical details for CVE-2014-2429 are not publicly available in the provided documents. Monitor for updates from official advisories; current sources summarize the vulnerability only at a high level without specifics.

Code injection

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...

PostgreSQL contrib/hstore/hstore_io.c整数溢出漏洞

CVE ID:CVE-2014-2669 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL contrib/hstore/hstoreio.c存在整数溢出，允许远程通过验证的用户使应用程序崩溃。漏洞与hstorerecv, hstorefromarrays和hstorefromarray函数相关。 0 PostgreSQL 9.0.x PostgreSQL 9.1.x PostgreSQL 9.2.x PostgreSQL 9.3.x PostgreSQL...

Information disclosure

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony..level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by...

postgresql: multiple integer overflows in hstore_io.c

Multiple integer overflows in contrib/hstore/hstoreio.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the 1 hstorerecv, 2 hstorefromarrays, and 3 hstorefromarray...

PostgreSQL 8.4 < 8.4.20 / 9.0 < 9.0.16 / 9.1 < 9.1.12 / 9.2 < 9.2.7 / 9.3 < 9.3.3 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 8.4.x prior to 8.4.20, 9.0.x prior to 9.0.16, 9.1.x prior to 9.1.12, 9.2.x prior to 9.2.7 or 9.3.x prior to 9.3.3. It is, therefore, potentially affected by multiple vulnerabilities : - SET ROLE bypasses lack of ADMIN OPTION when granting...

Code injection

The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, aka SPR KLYH9F4S2Z...

CVE-2013-4065

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP...

IBM Domino Web Administrator Multiple Vulnerabilities

The remote IBM Domino web server includes IBM Domino Web Administrator webadmin.nsf and is affected by multiple vulnerabilities : - An authenticated user can exploit an unspecified cross- site request forgery CSRF vulnerability by enticing a user to follow a specially crafted URL. CVE-2013-4050 -...

Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051...

CVE-2013-4055

CVE-2013-4055 is an XSS vulnerability in IBM Domino Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. The issue permits remote authenticated users to inject arbitrary scripts/HTML via unspecified vectors; the exact exploitation path is not detailed in the provided documents. T...

CVE-2013-4050

IBM Domino Web Administrator (webadmin.nsf) on Domino 8.5.x and 9.0.x is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows a remote authenticated user to hijack the authentication of unspecified victims via unknown vectors. The initial sources do not provide a concrete exp...

CVE-2013-4051

CVE-2013-4051 is an XSS vulnerability in IBM Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The related CVE-2013-4055 is a separate XSS in the same component. Public exploit...

CVE-2013-5389

CVE-2013-5389 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Domino iNotes. The affected products are IBM Domino iNotes for version 8.5.3 before FP5 IF2 and 9.0 before IF5. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

FreeBSD 9.0 - Intel SYSRET Kernel Privilege Escalation

FreeBSD 9.0 - Intel SYSRET Kernel Privilege Escalation / FreeBSD 9.0 Intel SYSRET Kernel Privilege Escalation exploit Author by CurcolHekerLink This exploit based on open source project, I can make it open source too. Right? If you blaming me for open sourcing this exploit, you can fuck your mom...

FreeBSD 9.0 - Intel SYSRET Kernel Privilege Escalation

/ FreeBSD 9.0 Intel SYSRET Kernel Privilege Escalation exploit Author by CurcolHekerLink This exploit based on open source project, I can make it open source too. Right? If you blaming me for open sourcing this exploit, you can fuck your mom. Free of charge : Credits to KEPEDEAN Corp, Barisan Sak...

IBM Lotus Domino Multiple Information Disclosure Vulnerabilities

Lotus Domino Server is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion Authentication Bypass Vulnerability (APSA13-01)

Adobe ColdFusion is prone to a remote authentication bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...