CVE-2012-2566

CVE-2012-2566 concerns Bloxx Web Filtering prior to 5.0.14. The issue is that the product does not correctly interpret the X-Forwarded-For header during HTTPS access-control and logging, which can allow an unauthenticated user to bypass IP/domain restrictions and produce misleading logs. The entr...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7811)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : - A USB string descriptor overflow in the auerwald USB driver was fixed, which could be used by physically proximate attackers to cause a...

CVE-2012-1823

creationtimestamp| type| source ---|---|--- 2012-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18834 2012-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18836 2013-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29290 2018-05-29...

History.state can leak the state data from cross domain pages

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

Design/Logic Flaw

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

krb5 security and bug fix update

1.6.1-70.el5 - add upstream patch for telnetd buffer overflow CVE-2011-4862, 770351 1.6.1-69.el5 - ftp: fix a static analysis should-never-happen NULL dereference 750823 1.6.1-68.el5 - backport fixes to teach libkrb5 to use descriptors higher than FDSETSIZE to talk to a KDC by using poll if it's...

CVE-2011-5258

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36380 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36379...

CVE-2011-4544

creationtimestamp| type| source ---|---|--- 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36341 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36342 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36343 2011-11-23...

Ubuntu Update for tomcat6 USN-1252-1

Ubuntu Update for Linux kernel vulnerabilities USN-1252-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12521.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for tomcat6 USN-1252-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-3984

Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...

CVE-2011-3984

CVE-2011-3984 is an XSS vulnerability in KENT-WEB WEB FORUM (versions 5.1 and earlier) that can be triggered via web form entries to inject arbitrary script/HTML. Public details indicate remote injection possibilities, with related entries noting multiple XSS issues in the same product. Remediati...

CVE-2011-3984

Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...

Windows Gather Windows Host File Enumeration

This module returns a list of entries in the target system's hosts file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Windows Host File Enumeration', 'Description' = %q This...

CDE ToolTalk RPC Database Server Multiple Vulnerabilities

This host is running the CDE ToolTalk Database Server and is prone to the multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtooltalkrpcdatabaseservermultvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ CDE ToolTalk RPC Database Server Multiple Vulnerabilities Authors: Antu Sanadi...

Skype zero day HTML/(Javascript) code injection

Skype zero day HTML/Javascript code injection Noptri Public Security Advisory has publised a working skype zero day vulnerability with POC for skype. Skype users need be aware of this vulnerability. Affected Software: Software: Skype = 5.5.0.113 Affected Platforms: Windows XP, Vista, 7 Problem...

Apple Updates XProtect to Detect Mac Trojan

Apple released an update today for its built-in, malware protection platform, XProtect, in response to the emergence of Mac-targeting trojan that hijacks Google searches, according to an article posted on Softpedia. Once the trojan has installed itself on a user’s machine, it starts adding fake...

Debian Security Advisory DSA 2264-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2264-1. OpenVAS Vulnerability Test $Id: deb22641.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2264-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Design/Logic Flaw

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file...