Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

EmailArchitect Enterprise Email Server 10.0 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

PT-2012-2873 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue allows remote authenticated users to inject arbitrary e-mail headers via...

DEBIAN-CVE-2012-2672

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function...

CVE-2011-2545: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 before 5.2.13, and SPA 500 series IP phones before 7.4.9 allows remote attackers to inject arbitrary web script or HTML via the FROM field of an INVITE message, aka...

Gentoo Security Advisory GLSA 201110-17 (avahi)

The remote host is missing updates announced in advisory GLSA 201110-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2012-1018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/convert.php in D-Mack Media Currency Converter modcurrencyconverter module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter...

PT-2012-3017

Name of the Vulnerable Software and Affected Versions D-Mack Media Currency Converter mod currencyconverter module version 1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the from...

PT-2012-2988

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Agent Zone aka The Real Estate Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the price from parameter in the "search.php" endpoint...

Another Dutch CA, KPN, Stops Issuing Certificates After Finding DDoS Tool On Server

Another Dutch certificate authority, KPN, has stopped issuing digital certificates after finding attack tools on a server in its Web infrastructures. The CA said that while it doesn’t have evidence right now that it’s CA infrastructure was compromised, it is taking the actions as a precaution. Th...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...

Google Chrome WebGL Texture Information Disclosure Vulnerability (Windows)

This host is installed with Google Chrome and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebgltextureinfodiscvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome WebGL Texture Information Disclosure Vulnerability Windows Authors: Shash...

Ubuntu 10.10 : linux vulnerabilities (USN-1160-1)

Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. CVE-2010-4529 Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc...

Chrome Stable Release

The Google Chrome team is happy to announce the release of Chrome 12 to the Stable Channel for all platforms. Chrome 12.0.742.91 includes a number of new features and updates, including: Hardware accelerated 3D CSS New Safe Browsing protection against downloading malicious files Ability to delete...

PHPBoost 3.0 backup vulnerability-vulnerability warning-the black bar safety net

Title : PHPBoost 3.0 Remote Download Backup Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -0 0 2 1 3 5 5 5 2 4 8 7 0 1 Twitter page : twitter.com/kedans platform : php Impact : Download Backup Database . sql File Tested on : Windows XP sp3 FR Note...

Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability

The host is running Rumble SMTP Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbrumblesmtpsrvmailfromcmddosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability Authors: Veerendra G.G Copyright...

Rumble SMTP Server 'MAIL FROM' Command Denial of Service Vulnerability

Rumble SMTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rumble Mail Server 'MAIL FROM'命令远程拒绝服务漏洞

BUGTRAQ ID: 47070 Rumble是以ANSI C编写的邮件服务器，对大多数服务和邮件扩展实现模块化管理。 Rumble邮件服务器在"MAIL FROM"命令的实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成受影响应用程序崩溃，拒绝服务合法用户。 Humbedooh Rumble 0.25.2232 厂商补丁： Rumble ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://rumbleserver.sourceforge.net/ import socket host = 'localhost...

PT-2011-1241

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.6 Description The issue is related to an integer overflow in the SdnToJulian function within the Calendar extension in PHP. This allows context-dependent attackers to cause a denial of service, resulting in an...