3776 matches found
DEBIAN-CVE-2014-8133
arch/x86/kernel/tls.c in the Thread Local Storage TLS implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a...
PT-2014-8423
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.1 Description The issue allows local users to bypass the espfix protection mechanism, making it easier to bypass the ASLR protection mechanism. This can be achieved via a crafted application that makes a set...
U-Mail the latest version of the arbitrary File Download vulnerability-vulnerability warning-the black bar safety net
The problem occurs is in the picture preview of the place code area http://192.168.1.24/webmail/client/mail/index. php? module=operate&action=attach-img-preview&durl=1. gif&type=application/octet-stream The key code is as follows: code area if ACTION == "attach-img-preview" $downloadurl =...
CVE-2014-8771
Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2014-8771
CVE-2014-8771 affects X3 CMS versions 0.5.1 and 0.5.1.1, with multiple CSRF vulnerabilities in the admin area that allow remote attackers to hijack administrator authentication via unspecified vectors. Exploitation details are not provided in the available documents. The entry’s CVSS assessment i...
PT-2014-8726
Name of the Vulnerable Software and Affected Versions X3 CMS versions 0.5.1 through 0.5.1.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin area. These vulnerabilities allow remote attackers to hijack the authentication of administrators via...
CVE-2014-8771: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors...
WordPress Contact Form DB Plugin <= 2.8.17 - Reflected XSS
This plugin is prone to a reflected cross site scripting vulnerability in Admin Area. Solution Update the plugin...
CVE-2014-7835: Improper Neutralization of Input During Web Page Generation
webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not ensure that a file upload is for a private or draft area, which allows remote authenticated users to upload files containing JavaScript, and consequently conduct cross-site scripting XSS attacks, by specifying the...
Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 Msf::Exploit::Local Rank =...
RHEL 6 : kernel (RHSA-2014:1365)
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2014-7117
The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7117
The CVE-2014-7117 entry concerns The Forest Area FCU Mobile app (com.metova.cuae.fafcu), version 1.0.29 for Android, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation, enabling MITM attackers to spoof servers and obtain sensitive information via...
CVE-2014-7117
The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7117: Undefined Security Weakness
The Forest Area FCU Mobile aka com.metova.cuae.fafcu application 1.0.29 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7781
Name of the Vulnerable Software and Affected Versions The Forest Area FCU Mobile application version 1.0.29 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 'Microsoft Bluetooth Personal Area Networking BthPan.sys Privilege...
Microsoft Bluetooth Personal Area Networking - 'BthPan.sys' Local Privilege Escalation (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 'Microsoft Bluetooth Personal Area Networking BthPan.sys Privilege...