411 matches found
CVE-2011-3860
Cross-site scripting XSS vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
PT-2011-4736 · Cover · Cover
Name of the Vulnerable Software and Affected Versions: Cover WP theme versions prior to 1.6.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...
WordPress Cover WP Theme 1.6.5 - Cross Site Scripting
WordPress Cover WP theme's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-base...
WordPress Theme Cover WP 1.6.5 - 's' Cross-Site Scripting
source: https://www.securityfocus.com/bid/49873/info The Cover WP theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Operation Satiagraha - Brazil Corruption Scandal exposed, #Antisec provide 5GB of evidence
Operation Satiagraha - Brazil Corruption Scandal exposed , Antisec provide 5GB of evidence Once Again Pandora's box is open. In a joint move between LulzSec and Anonymous, as part of Operation Antisec, were released documents, photos, audio files and videos, exposing that wich was one of the...
Operation Satiagraha - Brazil Corruption Scandal exposed, #Antisec provide 5GB of evidence
Operation Satiagraha - Brazil Corruption Scandal exposed , Antisec provide 5GB of evidence Once Again Pandora's box is open. In a joint move between LulzSec and Anonymous, as part of Operation Antisec, were released documents, photos, audio files and videos, exposing that wich was one of the...
Gary McKinnon
For more than a year between February of 2001 and March of 2002, a British national, Gary McKinnon, was allegedly able to hack into nearly 100 United States military and NASA computers. Prosecutors have accused McKinnon of having committed the “biggest military computer hack of all time.” McKinno...
Black Ice Cover Page ActiveX Control Arbitrary File Download
Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...
Black Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)
Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...
Alex Hutton on the 2011 Verizon Data Breach Investigations Report
Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report. Podcast audio...
Microsoft Windows multiple security vulnerabilities
SMB client and server memory corruption, Fax Cover Page Editor memory corruption, MFC library unsafe DLL loading, MHTML library information leak, GDI+ library integer overflow, DNS client memory corruption, memory corruption in .Net Framework, memory corruption in JScript / VBScript engines, stac...
Microsoft Windows Fax Cover Page Editor远程代码执行漏洞(MS11-024)
BUGTRAQ ID: 45583 CVE ID: CVE-2010-3974 Microsoft Windows Fax Cover Page Editor用于个性化传真以及呈现更正式外观的传真传输。 Microsoft Windows Fax Cover Page Editor在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 传真首页编辑器错误解析特制传真首页时存在远程代码执行漏洞，成功利用任何漏洞的攻击者可以获得与本地用户相同的用户权限。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft...
CVE-2010-3974
fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary...
CVE-2010-3974
CVE-2010-3974 is a memory corruption vulnerability in the Windows Fax Cover Page Editor (fxscover.exe) that occurs when parsing crafted Fax cover pages (.cov). A remote attacker could execute arbitrary code on affected systems by convincing a user to open a malicious fax cover page file. Affected...
Windows Fax Cover Page Editor Remote Code Execution Vulnerability (2527308)
This host is missing a critical security update according to Microsoft Bulletin MS11-024. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Windows Fax Cover Page Editor Remote Code Execution Vulnerability (2527308)
This host is missing a critical security update according to Microsoft Bulletin MS11-024. OpenVAS Vulnerability Test $Id: secpodms11-024.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Fax Cover Page Editor Remote Code Execution Vulnerability 2527308 Authors: Antu Sanadi Updated By: Antu sanadi...
PT-2011-1459 · Microsoft · Windows Server 2003 +6
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...
MS11-024: Vulnerability in Windows Fax Cover Page Editor could allow remote code execution: April 12, 2011
Resolves a vulnerability in Windows that could allow remote code execution if a user opened a specially crafted fax cover page file .cov by using Windows Fax Cover Page Editor.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows,...
Preemptive Protection against Microsoft Windows Fax Cover Page Editor Memory Corruption Vulnerability (MS11-024)
A remote code execution vulnerability in the way that the Windows Fax Cover Page Editor improperly parses specially crafted fax cover pages. The Fax Cover Page Editor fxscover.exe application can be used to create and edit fax cover pages. A remote attacker may exploit this vulnerability to execu...