Adobe Flash Player Sandbox Security Bypass (APSB14-14: CVE-2014-0520)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

Adobe Flash Player Sandbox Security Bypass (APSB14-14: CVE-2014-0518)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

Acunetix 8 Stack Buffer Overflow

Exploit Title: Acunetix Stack Based overflow Date: 24/04/14 Exploit Author: Danor Cohen An7i - http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html Vendor Homepage: http://www.acunetix.com/ Software Link: http://www.acunetix.com/vulnerability-scanner/download/ Version: 8 build...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

Fedora Update for apache-commons-fileupload FEDORA-2014-2183

Check for the Version of apache-commons-fileupload OpenVAS Vulnerability Test Fedora Update for apache-commons-fileupload FEDORA-2014-2183 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19

The javax.servlet package lacks support for rfc 1867, html file upload. This package provides a simple to use api for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest...

Pirelli Discus DRG A125g - Local Password Disclosure

Pirelli Discus DRG A125g - Local Password Disclosure !/usr/bin/perl Author: Sebastián Magof Hardware: pirelli discus DRG A125g Vulnerable file: wlbasic.html Bug: Wifi Password Disclosure Type: Local / ±lpha "" usage:perl exploit.pl use LWP::UserAgent; use HTTP::Request; begin print "\n\n\n";...

WS-2013-0246

In xwiki-platform versions between 3.1 to 5.1 are vulnerable to cross-site scripting via uploading specially crafted HTML file...

RealNetworks RealPlayer Denial of Service Vulnerability - July13 (Windows)

This host is installed with RealPlayer which is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerdosvulnjul13win.nasl 6093 2017-05-10 09:03:18Z teissa $ RealNetworks RealPlayer Denial of Service Vulnerability - July13 Windows Authors: Arun Kallavi Copyright:...

RealNetworks RealPlayer Denial of Service Vulnerability (Jul 2013) - Windows

RealPlayer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox 17.0.1 Crash Proof Of Concept

Exploit Title: Firefox 17.0.1 Crash PoC Date: 13.12.2012 Exploit Author: limb0 Software Link: http://www.mozilla.org/en-US/ Version: 17.0.1 Tested on: Linux +-------------------------------------------------------------+ Instruction 1.Create a new .html/.htm file and copy paste this code in...

RIM BlackBerry PlayBook information leakage

Local HTML file can send any data outside...

DropBox iOS / Android App File Theft

DropBox version 1.4.6 on iOS, 2.0.1 on Android, and Google Drive version 1.0.1 on iOS suffer from a file theft vulnerability due to allowing arbitrary javascript to be executed inside of the privileged file zone. 1 Introduction ================================================ Recently, I discover...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse 1 RSRC32.dll or 2 dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this...

FCKeditor exploit summary-vulnerability warning-the black bar safety net

Fckeditor exploit summary View Editor Version FCKeditor/whatsnew.html ------------------------------------------------------------- 2. Version 2.2 version Apache+linux environments in the upload files back plus a. Breakthrough! Test passed...

Authentication flaw

The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under 1 status/, 2 system/, 3 ports/, 4 trunks/, 5 vlans/, 6 qos/, 7 rstp/, 8 dot1x/, 9 security/, 10 igmps/, or 11 snmp/...

Directory traversal

1 AlbumTab.py, 2 ArtistTab.py, 3 LinksTab.py, and 4 LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory...

Safari On iOS Denial Of Service

/PoC for Safari crash discovered by Alberto Ortega @a0rtega, [email protected] http://www.livehacking.com/category/vulnerability/apple-vulnerability/ This PoC written by Larry W. Cashdollar http://vapid.dhs.org @lcashdol This PoC creates an html file to be served out by a normal webserver. It...

FlashPeak SlimBrowser 6.0.1.38 Denial Of Service

Title: FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability Software : FlashPeak SlimBrowser Software Version : 6.0.1.38 Vendor: FlashPeak Inc.www.flashpeak.com/ Vulnerability Published : 2012-05-16 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...