Joomla Multiple Components SQLi Vulnerabilities

Joomla with multiple components is prone to SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Zenturi ProgramChecker ActiveX Components ActiveX Controls Buffer Overflows (CVE-2007-2987)

Multiple buffer overflow vulnerabilities have been reported in Zenturi ProgramChecker. The vulnerabilities are due to a data validation failure, resulting in a buffer overflow. A remote attacker may exploit these vulnerabilities by enticing a target user to open a specially crafted HTML file...

Apple OS X multiple security vulnerabilities

Multiple vulnerabilities in different system components...

OpenVAS - Advanced Open Source vulnerability scanner

OpenVAS - Advanced Open Source vulnerability scanner OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained...

Microsoft Office Web Components URL Parsing Buffer Overflow (MS08-017; CVE-2006-4695)

A buffer overflow vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to improper handling of certain URLs. A remote attacker may exploit this vulnerability by enticing a target user to visit a malicious web-page. Successful exploitation would allow an...

Microsoft Office Web Components DataSource Code Execution (MS08-017; CVE-2007-1201)

A remote code execution vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to insufficient verification of the control's DataSource path. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a specially crafted web-pag...

Apple iPhone multiple security vulnerabilities

Multiple vulnerabilities in different system components and applications...

Microsoft Office Web Components Arbitrary Code Execution (CVE-2009-1136)

A code execution vulnerability has been reported in Microsoft office web components. The vulnerability is due to insecure design of certain methods within ActiveX controls. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page. Successful...

Joomla! 1.7.0 Cross Site Scripting

Joomla! 1.7.0 | Multiple Cross Site Scripting XSS Vulnerabilities 1. OVERVIEW Joomla! 1.7.0 stable version is vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets...

Military Contractor Mitsubishi hacked

Military Contractor Mitsubishi hacked Mitsubishi Heavy Industries Ltd said on Monday that its computers had been hacked into, with one newspaper saying the target was Japan's biggest defence contractor's factories for submarines, missiles and nuclear power plant components. "There is no possibili...

MS11-071: Vulnerability in Windows Components could allow remote code execution: September 13, 2011

None None...

Ramnit Worm Evolves Into Financial Malware

The Ramnit worm, known by researchers for its use of somewhat old-school malicious techniques, has now changed some of its tactics and morphed into financial malware, researchers say. As of now, researchers at Trusteer say they have no way of determining whether Ramnit has actually changed, or if...

A Miner Botnet: Bitcoin Mining Goes Peer-to-Peer

Identifying a botnet is not an easy task sometimes, especially when one gets lost in different components like droppers, infectors and other bad stuff. Some two weeks ago, Jose Nazario from Arbor Networks pointed me to a new varmint that appears to be another peer-to-peer bot. When executed, the...

Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)

This host is missing an important security update according to Microsoft Bulletin MS11-059. OpenVAS Vulnerability Test $Id: secpodms11-059.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Data Access Components Remote Code Execution Vulnerabilities 2560656 Authors: Veerendra GG Copyright: Copyright...

Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)

This host is missing an important security update according to Microsoft Bulletin MS11-059. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components Windows DAC 6.0 in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as...

CVE-2011-1975

The CVE-2011-1975 entry describes an Untrusted search path vulnerability in the Data Access Tracing component of Windows Data Access Components (MDAC) 6.0. A local attacker could gain privileges by placing a Trojan horse DLL in the current working directory, demonstrated via a crafted Excel (.xls...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...

MS11-059: Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (2560656)

The version of Microsoft Data Access Components MDAC installed on the remote Windows host is affected by a code execution vulnerability. By tricking a user into opening a legitimate Excel file that is in the same directory as a specially crafted library file, a remote, unauthenticated user could...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...