10489 matches found
Design/Logic Flaw
Untrusted search path vulnerability in python-paste-script aka paster in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the 1 current working directory or 2 its parent directories...
CVE-2013-4482
Untrusted search path vulnerability in python-paste-script aka paster in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the 1 current working directory or 2 its parent directories...
Threat Outbreak Alert: Fake Account Information Email Messages on November 17, 2013
Medium Alert ID: 31800 First Published: 2013 November 18 21:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain account information for the recipient. The text in the email message attempts to convince the recipient to op...
CVE-2013-3909
CVE-2013-3909 affects Microsoft Internet Explorer 6–8. An attacker can read content from a different domain/zone via crafted CSS token sequences, enabling remote information disclosure. The issue is addressed by Microsoft Security Bulletin MS13-088 and corresponding patches. The vulnerability sch...
CVE-2013-4515
The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTLBCMGETDEVICEDRIVERINFO ioctl call...
DEBIAN-CVE-2013-4515
The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTLBCMGETDEVICEDRIVERINFO ioctl call...
PT-2014-3109 · X.Org +5 · X.Org +5
Name of the Vulnerable Software and Affected Versions: X.Org affected versions not specified Description: The issue is related to an integer underflow in the xTrapezoidValid macro, which can be exploited by context-dependent attackers to cause a denial of service, resulting in a crash. This can b...
PT-2013-5054 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue allows local users to obtain sensitive information from kernel memory. This is due to the bcm char ioctl function in drivers/staging/bcm/Bcmchar.c not initializing a certain data...
[SECURITY] Fedora 20 Update: accountsservice-0.6.35-1.fc20
The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information and an implementation of these interfaces, based on the useradd, usermod and userdel commands...
Wordpress WP Realty Plugin - eMail Sender Vulnerability
Exploit Title: Wordpress - wp-realty - eMail Sender Google Dork: inurl:"/wp-content/plugins/wp-realty/" Vendor: http://wprealty.org/ Date: 10/08/2013 Exploit Author: Napsterakos Link: http://localhost/wp-content/plugins/wp-realty/ Exploit:...
http-server-header NSE Script
Uses the HTTP Server header for missing version info. This is currently infeasible with version probes because of the need to match non-HTTP services correctly. Example Usage nmap -sV Script Output PORT STATE SERVICE VERSION 80/tcp open http Unidentified Server 1.0 PORT STATE SERVICE VERSION 80/t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/auditlog/, 2 PATHINFO to info/host/ or 3 viewport/, 4 back parameter to login, or 5 "from" parameter to status/service/recheck...
Oracle Database Patch Info (Windows) (credentialed check)
It was possible to gather database patch information with the supplied credentials. Binary data oraclerdbmspatchinfowin.nbin...
tipask quiz system 2. 0SQL time of the blind injection vulnerability-vulnerability warning-the black bar safety net
File /model/question.php function ontag $tag = urldecode$this-get'2'; //secondary code to bypass //echo $tag; $encodeword = urlencode$tag; $navtitle = $tag . '-Tag search'; $qstatus = $status = intval$this-get3; !$ status && $qstatus = "1,2,6"; $startindex = $page - 1 $pagesize; $rownum =...
Simple, but Critical vulnerability in Verizon Portal revealed users' SMS History
A Security researcher discovered a critical privacy vulnerability on Verizon Wireless’s Web-based customer portal that allows anyone to download user’s SMS History and Numbers of other users he communicated with. Back in August, researcher 'Cody Collier' found that a simple URL exploit could allo...
Microsoft Windows App Container CVE-2013-3880 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit these issues to disclose sensitive information on the affected system. This information may be used in further attacks. Technologies Affected Avaya Aura Conferencing Standard Avaya...
SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution Vulnerability
This Metasploit module exploits the SEListCtrlX ActiveX installed with the SIEMENS Solid Edge product. The vulnerability exists on several APIs provided by the control, where user supplied input is handled as a memory pointer without proper validation, allowing an attacker to read and corrupt...
SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...
HP Multiple Network Products Unspecified Information Disclosure and Remote Code Execution (HPSBHF02888)
The remote HP router or switch could be missing a vendor-supplied update that corrects an issue that a malicious attacker could remotely exploit in order to cause a disclosure of information or execution of code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70172;...
