CVE-2012-6453

Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

CVE-2012-6337

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

CVE-2012-6335

The CVE-2012-6335 entry concerns AVG AntiVirus for Android: the Anti-theft service can be manipulated by a physically proximate attacker to supply arbitrary location data via a simple GPS location spoofer, potentially affecting app behavior. Impact described as location data spoofing with evidenc...

CVE-2012-5642

Fail2ban CVE-2012-5642 affects versions before 0.8.8. The vulnerability arises from improper handling of the content of the tag, which could allow remote attackers to trigger unsafe behavior in a custom action file via arbitrary symbols in that content. Impact is described as potential unsafe be...

CVE-2012-6453

CVE-2012-6453 affects the RSS Reader extension for MediaWiki prior to version 0.2.6. The vulnerability arises from improper escaping in feed content, allowing remote attackers to inject arbitrary JavaScript/HTML into MediaWiki pages via a crafted feed. Several connected sources (Debian/DSA-2596-1...

CVE-2012-6334

The CVE-2012-6334 entry concerns Samsung Galaxy devices' SamsungDive Track My Mobile feature on Android. The vulnerability arises because Location APIs are not properly implemented in Track My Mobile, enabling physically proximate attackers to inject arbitrary location data via a simple GPS locat...

CVE-2012-6339

Cerberus FTP Server has multiple XSS vulnerabilities in the Web Administration interface (log viewer and servermanager commands) affecting versions before 5.0.6.0. An attacker could inject arbitrary web script/HTML through log entries in the Log Manager or through a Messages field in servermanage...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

Lattice Semiconductor PAC-Designer Symbol Value Buffer Overflow (CVE-2012-2915)

A stack buffer overflow vulnerability has been reported in Lattice Semiconductor PAC-Designer. The vulnerability is due to the improper handling of validation of specially crafted pac files. Successful exploitation would result in execution of arbitrary code, but requires tricking a user into...

Grep < 2.11 Integer Overflow Crash PoC

Exploit for linux platform in category dos / poc Grep /dev/null Segmentation fault core dumped Method two: $ perl -e 'print "\nx"x231' | grep -c x /dev/null Twitter: https://twitter.com/MegaManSec CVE: CVE-2012-5667 -- Joshua Rogers - Retro Game Collector && IT Security Specialist gpg pubkey...

Android Boat Browser / Boat Browser Mini 信息泄露漏洞(CVE-2012-5179)

CVE ID:CVE-2012-5179 Android Boat Browser / Boat Browser Mini是安卓平台下的浏览器应用。 Android平台下的Boat Browser / Boat Browser Min不正确实现WebView class，允许攻击者构建恶意应用，诱使用户安装后，获取敏感信息。 0 Android Boat Browser application 4.2之前版本 Android Boat Browser Mini application 3.9之前版本 厂商解决方案 用户可联系厂商获得最新的应用版本修复此漏洞：...

Grep 2.11 - Integer Overflow Crash (PoC)

Grep 2.11 - Integer Overflow Crash PoC Grep /dev/null Segmentation fault core dumped Method two: $ perl -e 'print "\nx"x231' | grep -c x /dev/null Twitter: https://twitter.com/MegaManSec CVE: CVE-2012-5667 -- Joshua Rogers - Retro Game Collector && IT Security Specialist gpg pubkey...

IBM Lotus QuickR qp2 ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Grep Integer Overflow

Grep /dev/null Segmentation fault core dumped Method two: $ perl -e 'print "\nx"x231' | grep -c x /dev/null Twitter: https://twitter.com/MegaManSec CVE: CVE-2012-5667 -- Joshua Rogers - Retro Game Collector && IT Security Specialist gpg pubkey...

CVE-2012-6656

iconvdata/ibm930.c in GNU C Library aka glibc before 2.16 allows context-dependent attackers to cause a denial of service out-of-bounds read via a multibyte character value of "0xffff" to the iconv function when converting IBM930 encoded data to UTF-8...

CVE-2012-2176

creationtimestamp| type| source ---|---|--- 2012-12-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23737 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/quickrqp2bof.rb 2025-02-06 03:13:40+00:00| seen|...

Fedora Update for libtiff FEDORA-2012-20446

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2594-1 : virtualbox-ose - programming error

'halfdog' discovered that incorrect interrupt handling in VirtualBox, a x86 virtualization solution, can lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2594. Th...

Mandriva Update for libtiff MDVSA-2012:184 (libtiff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Internet Explorer 6/7/8 mshtml!CDwnBindInfo对象释放后重用代码执行漏洞

BUGTRAQ ID: 57070 CVECAN ID: CVE-2012-4792 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer在mshtml!CDwnBindInfo对象的处理上存在释放后重用漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页内容导致执行任意代码控制用户系统。 此漏洞是0day漏洞，目前已被发现用于执行针对性的攻击。 不受影响系统： Microsoft Internet Explorer 9.x Microsoft Internet Explorer 10.x 0 Microsoft...