KLA10232 ACE vulnerability in KMPlayer

An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Related products KMPlayer CVE list CVE-2012-3841 critical Solution Update to...

KLA10041 ACE vulnerability in Adobe Flash

An unspecified vulnerability was found in Adobe Flash Professional. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via unknown vectors.. Original advisories Adobe bulletin Related products Adobe-Flash-CS3 Adobe-Flash-CS4 Adobe-Flas...

Cisco Patches Vulnerabilities in VPN Client, ACE Product

Cisco warned customers Wednesday of several vulnerabilities in its AnyConnect Secure Mobility virtual private network VPN client, claiming that if not patched, the VPN software could be exploited by a remote attacker. The holes are present in versions of Cisco’s VPN client for Microsoft’s Windows...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting the following products: Cisco ASA 5500 Series Adaptive Security Appliances Cisco ASA Cisco Catalyst 6500 Series ASA Service Module Cisco ASASM Cisco AnyConnect Secure Mobility Client Cisco Application Control Engine...

CVE-2012-3063

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

Design/Logic Flaw

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

CVE-2012-3063

CVE-2012-3063 affects Cisco ACE (Application Control Engine) in multicontext mode. Cisco ACE software versions before A4(2.3) and A5(1.1) fail to share a management IP address correctly among multiple contexts, enabling remote authenticated administrators to bypass access restrictions and read/mo...

CVE-2012-3063

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

KLA10030 ACE vulnerabilities in Adobe Photoshop

Multiple serious vulnerabilities have been found in Adobe Photoshop. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. Use-after-free vulnerability can be exploited via specially designed TIFF image. 2. Buffer overflow...

KLA10383 ACE vulnerability in VMware

Multiple critical vulnerabilities have been found in VMware. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper RPC handling can be exploited by guest OS users via specially designed...

KLA10326 ACE vulnerability in JustSystems products

A buffer overflow was found in JustSystems products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed image. Original advisories - Related products Ichitaro-viewer Shuriken Ichitaro-Government...

Tube Ace - q Cross-Site Scripting

Tube Ace - q Cross-Site Scripting source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Tube Ace - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Tube Ace Cross Site Scripting

Exploit Title: Tube AceAdult PHP Tube Script XSS Vulnerability Date: 15/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan...

CVE-2012-1029

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-1029

CVE-2012-1029 refers to a SQL injection vulnerability in Tube Ace (Adult PHP Tube Script) 1.6, specifically in mobile/search/index.php via the q parameter. The root cause is an SQL injection that could allow remote attackers to execute arbitrary SQL commands. Affected component: the q parameter i...

Tube Ace (Adult PHP Tube Script) - SQL Injection

Tube Ace Adult PHP Tube Script - SQL Injection Exploit Title: Tube AceAdult PHP Tube Script SQL Injection Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork...

Tube Ace SQL Injection

Exploit Title: Tube AceAdult PHP Tube Script SQL Injection Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan Jais...

Tube Ace (Adult PHP Tube Script) - SQL Injection

Exploit Title: Tube AceAdult PHP Tube Script SQL Injection Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan Jais...