European Space Agency SQL vulnerability exploited

The European Space Agency ESA is an intergovernmental organisation dedicated to the exploration of space. Hacker going by name "SlixMe" find and exploit SQL Injection vulnerability on a sub domain of website. Hacker upload dump on his website, where he disclose the SQLi vulnerable link and Databa...

CVE-2012-6312

creationtimestamp| type| source ---|---|--- 2012-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38066...

CVE-2012-6608

creationtimestamp| type| source ---|---|--- 2012-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38078...

CVE-2012-4982

creationtimestamp| type| source ---|---|--- 2012-11-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38062...

CVE-2012-5701

creationtimestamp| type| source ---|---|--- 2012-11-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38042...

CVE-2012-5702

creationtimestamp| type| source ---|---|--- 2012-11-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38043...

McAfee Virtual Technician ActiveX Control Insecure Method

High-Tech Bridge Security Research Lab discovered vulnerability in McAfee Virtual Technician ActiveX control, which can be exploited by remote malicious person to overwrite arbitrary files with garbage data on a vulnerable system. 1 Insecure method in McAfee Virtual Technician ActiveX control:...

CVE-2013-2261

creationtimestamp| type| source ---|---|--- 2012-11-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38636 2024-02-01 18:11:24+00:00| seen| https://t.me/ctinow/177714...

CVE-2013-4103

creationtimestamp| type| source ---|---|--- 2012-11-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38637 2024-02-01 19:16:37+00:00| seen| https://t.me/ctinow/177746...

Inout Article Base Ultimate SQL Injection / CSRF

============================================================================== Vulnerable Software: Inout Article Base Ultimate Version: getSubcategoryList$cid; $this-loadLibrary"settings"; $set=new settings"nesoteinoutarticlesettings"; $set-loadValues; $showarticles=$set-getValue"show...

Microsoft Internet Explorer memory corruption

Use-after-free vulnereability is actively used in-the-wild to install malware...

Fedora Update for java-1.7.0-openjdk FEDORA-2012-16351

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for java-1.7.0-openjdk RHSA-2012:1386-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Arbitrary resource file download in urlrewrite.xml

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-26888. panel There is an arbitrary resource file download vulnerability triggered by a third party library...

Some WordPress Themes, Thousands of Sites Open to XSS Vulnerability

A number of WordPress themes being distributed by the developer Parallelus are vulnerable to cross-site scripting XSS attacks, reports said. Themes, bits of PHP and HTML code that alter the look and functionality of sites, are usually installed via WordPress’ dashboard tool or by FTP. According t...

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fedora Update for java-1.6.0-openjdk FEDORA-2012-13127

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MS KB2757760: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)

The remote host is missing the workaround referenced in KB 2757760 Microsoft 'Fix it' 50939. This workaround mitigates a use-after-free vulnerability in Internet Explorer. Without this workaround enabled, an attacker could exploit this vulnerability by tricking a user into view a maliciously...

Design/Logic Flaw

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012...

CVE-2012-4969

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012...