Fedora 16 : dovecot-2.0.21-4.fc16 (2012-19752)

do not crash during mail search CVE-2012-5620 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

RealPlayer InternetShortcut URL property buffer overflow

Added: 01/07/2013 CVE: CVE-2012-5691 BID: 56956 OSVDB: 88486 Background RealPlayer is a media player application which can play back various multimedia file formats. Problem A buffer overflow vulnerability in the GetPrivateProfileString function allows command execution when a user opens a...

Ettercap 0.7.5.1 - Stack Overflow

Title: Ettercap Stack overflow CWE-121 References: CVE-2012-0722 Discovered by: Sajjad Pourali Vendor: http://www.ettercap.sourceforge.net/ Vendor contact: 13-01-01 21:20 UTC No response Solution: Using the patch Patch: http://www.securation.com/files/2013/01/ec.patch Local: Yes Remote: No Impact...

[SECURITY] [DSA 2601-1] gnupg, gnupg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2601-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 06, 2013 http://www.debian.org/security/faq -...

Nexpose Security Console - Cross-Site Request Forgery

Nexpose Security Console - Cross-Site Request Forgery Product: Nexpose Security Console Vendor: Rapid7 Version: //document.forms0.submit; //uncomment to auto-submit /code 2. Lure victim to http://attackersite.com/nexpose-csrf.htm. 3. Site with ID 1 is deleted when form is submitted. V...

Nexpose Security Console - Cross-Site Request Forgery

Product: Nexpose Security Console Vendor: Rapid7 Version: //document.forms0.submit; //uncomment to auto-submit /code 2. Lure victim to http://attackersite.com/nexpose-csrf.htm. 3. Site with ID 1 is deleted when form is submitted. Vendor Notified: Yes Vendor Response: Quickly escalated and reso...

Nexpose Security Console CSRF Vulnerability

Exploit for multiple platform in category web applications Product: Nexpose Security Console Vendor: Rapid7 Version: //document.forms0.submit; //uncomment to auto-submit /code 2. Lure victim to http://attackersite.com/nexpose-csrf.htm. 3. Site with ID 1...

Ratbox IRCd Denial Of Service

This exploit demonstrates a remotely trigger-able crash in ircd-ratbox version 2.0. It affects Shadowircd version 6.3.3 and Charybdis version 3.4.2. !/usr/bin/python3 . . | || || | || \ / | / \ / | |/ \ / \ | || || |\ // // | \ http://www.zempirians.com / /\ /||/|| / |||| // / 00100011...

[SECURITY] [DSA 2598-1] weechat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2598-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 05, 2013 http://www.debian.org/security/faq -...

CVE-2012-4549

A flaw was found in JBoss Enterprise Application Platform. The processInvocation function within the org.jboss.as.ejb3.security.AuthorizationInterceptor component incorrectly authorizes all requests when no roles are defined for an Enterprise Java Beans EJB method invocation. This allows attacker...

CVE-2012-4550

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans EJB access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Containers JACC permissions from being...

MoinMoin action/twikidraw.py和action/anywikidraw.py任意代码执行漏洞

BUGTRAQ ID: 57082 CVECAN ID: CVE-2012-6081 MoinMoin是一个基于Python环境的wiki引擎程序，支持包括中文在内的多语种特性。 MoinMoin 1.9.6之前版本中 twikidraw action/twikidraw.py 、anywikidraw action/anywikidraw.py 脚本存在多个文件上传漏洞，可允许具有写权限的、经过身份验证的远程攻击者通过上传带有可执行扩展名的文件，然后直接请求该文件，执行任意代码。 0 MoinMoin Wiki Engine 1.9.3 厂商补丁： MoinMoin --------...

JBoss Enterprise Application Platform安全绕过漏洞

CVE ID:CVE-2012-4550 JBOSS是一个基于J2EE的开放源代码的应用服务器。 当使用基于角色的授权用于Enterprise Java Beans EJB访问时，必须使用JACC权限来判断访问；但是存在一个安全漏洞没有调用配置的授权模块JACC, XACML等，使得JACC权限没有用来判断EJB访问，允许远程攻击者获得对EJB的未授权访问。 0 JBoss Enterprise Application Platform 即JBoss EAP或JBEAP 6.0.1之前版本 厂商解决方案 JBoss Enterprise Application Platform...

CVE-2012-6494 - Nexpose Security Console - Session Hijacking

Product: Nexpose Security Console Vendor: Rapid7 Version: 5.5.3 Tested Version: 5.5.1 Vendor Notified Date: December 19, 2012 Release Date: January 2, 2013 Risk: Medium Authentication: Access to logs required. Remote: Yes Description: Due to a flaw in the way the Nexpose Security Console logs...

AST-2012-014: Crashes due to large stack allocations when using TCP

Asterisk Project Security Advisory - AST-2012-014 Product Asterisk Summary Crashes due to large stack allocations when using TCP Nature of Advisory Stack Overflow Susceptibility Remote Unauthenticated Sessions SIP Remote Authenticated Sessions XMPP, HTTP Severity Critical Exploits Known No Report...

CVE-2012-4550

CVE-2012-4550 affects Red Hat/JBoss EAP 6.x up to 6.0.1 where, during EJB access, the configured authorization modules (JACC/XACML) were not invoked, preventing JACC permissions from being enforced and allowing remote access to an EJB. The issue is mitigated by updating to JBoss EAP 6.0.1 (RHSA-2...

Nexpose Security Console Session Capture

Product: Nexpose Security Console Vendor: Rapid7 Version: ’ is replaced by ‘nexposeCCSessionID=;time-zone-offset=000. 5. Success. Vendor Notified: Yes Vendor Response: Quickly escalated and resolved. Vendor Update: Remediated in 5.5.4. Reference: CVE-2012-6494...

AST-2012-015: Denial of Service Through Exploitation of Device State Caching

Asterisk Project Security Advisory - AST-2012-015 Product Asterisk Summary Denial of Service Through Exploitation of Device State Caching Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions Severity Critical Exploits Known None Reported On 26 July, 2012 Reported By...

Joomla LiveChat 2.0 XSS / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - LiveChat 2.0 Multilpes...