VLC v. 1.1.11 .mxf Memory Corruption

Exploit for windows platform in category local exploits Exploit Title: VLC v. 1.1.11 .mxf Memory Corruption Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int main...

CVE-2012-0450

Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations...

CVE-2012-0003

CVE-2012-0003 is a remote-code-execution issue in Windows Multimedia Library (winmm.dll) used by Windows Media Player. A specially crafted MIDI file can trigger the vulnerability, leading to arbitrary code execution with the user’s context. Affected products include Windows XP SP2/SP3, Windows Se...

PT-2011-5169 · Pligg · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 1.1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the status parameter in the "search.php" file. Recommendations: For Pligg CMS version 1.1.2, consider restricting...

Moderate: Red Hat Security Advisory: ipmitool security update

An updated ipmitool package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Excms excellent content management system to burst any file vulnerability and solution-vulnerability warning-the black bar safety net

Detailed description: The$GET'file'filter is not strict,explosion of any of the files Vulnerabilityto prove: http://www.excms.cn/apps/include. php? file=index.php Solution: the$GET'file'for strict filtering Author passerby@dark clouds@the clouds...

New XSS vulnerability in WP-Cumulus for WordPress and multiple web applications and millions web sites

Hello 3APA3A! I want to warn you about new Cross-Site Scripting vulnerability in WP-Cumulus for WordPress and multiple web applications and millions web sites. Earlier I wrote about XSS vulnerability in WP-Cumulus, which I've disclosed in 2009 http://securityvulns.com/Wdocument842.html, and many...

ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net

http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...

CentOS Update for java CESA-2011:1380 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Sql injection

SQL injection vulnerability in netinvoice.php in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."...

CVE-2011-3698

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...

eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities

Luigi Auriemma Application: eSignal and eSignal Pro http://www.esignal.com/esignal/default.aspx Versions: " files even those original included in the program like those with the registered extensions QUO, SUM and POR: eax=00000001 ebx=00000000 ecx=61616161 edx=02830000 esi=0012f020 edi=03ed97f0...

Fedora 15 : hplip-3.11.7-2.fc15 (2011-11189)

This update fixes a temporary file vulnerability in the fax support of HPLIP when debugging is enabled. This update adds support for some new printers and fixes several issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 14 : hplip-3.11.7-2.fc14 (2011-11199)

This update fixes a temporary file vulnerability in the fax support of HPLIP when debugging is enabled. This update adds support for some new printers and fixes several issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

aspcms Station system injection 0day-vulnerability warning-the black bar safety net

aspcms development of the new core open source enterprise built Station system, capable of enterprise a variety of site requirements, and Support template customization, support, extensions, etc., can be completed in a short time the enterprise built Station. Vulnerability file:/plug/productbuy...

RedHat Update for ecryptfs-utils RHSA-2011:1241-01

The remote host is missing an update for the Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2011-2594

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

Fedora 16 : hplip-3.11.7-2.fc16 (2011-11116)

This update fixes a temporary file vulnerability in the fax support of HPLIP when debugging is enabled. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

CVE-2011-2204

CVE-2011-2204 affects Apache Tomcat when MemoryUserDatabase logs password data on JMX user creation errors. Affected: Tomcat 5.5.x < 5.5.34, 6.x < 6.0.33, 7.x

CVE-2011-1943

CVE-2011-1943 affects NetworkManager 0.8.999-3.git20110526 in Fedora 15, where the destroy_one_secret function in nm-setting-vpn.c (libnm-util) logs a certificate password. The log entry can be read by local users, allowing disclosure of sensitive information. Impact is limited to confidentiality...