CVE-2013-0652

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...

1

kernel 2.6.18-348.1.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

South Korea HOMPYNET CMS multiple vulnerabilities-vulnerability warning-the black bar safety net

Upload vulnerability URL: /admin/imageadmin3. php? boardid=&iname=&iform= /admin/imageadmin2. php? boardid=&iname=&iform= Uploaded posterior diameter: /biswebpage/images/t. php. en Editor: /admin/editor/SWE.php /program/editor/SWE.php Data configuration file path: /mconfig/DATA/gsetting.php This...

WordPress Plugin Ripe HD FLV Player - SQL Injection

WordPress Plugin Ripe HD FLV Player - SQL Injection ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.ph...

Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor:...

PT-2013-2265 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.28 and earlier Description: The issue affects the Server component in Oracle MySQL and allows remote authenticated users to impact availability. The vectors related to this issue are unknown and pertain to Server...

ventrilo-info NSE Script

Detects the Ventrilo voice communication server service versions 2.1.2 and above and tries to determine version and configuration information. Some of the older versions pre 3.0.0 may not have the UDP service that this probe relies on enabled by default. The Ventrilo server listens on a TCP...

RedHat Update for gnome-vfs2 RHSA-2013:0131-01

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test RedHat Update for gnome-vfs2 RHSA-2013:0131-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RHEL 5 : gnome-vfs2 (RHSA-2013:0131)

Updated gnome-vfs2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Stabuniq Trojan rapidly stealing data from US banks

--- Trojan.Stabuniq geographic distribution by unique IP address Security researchers from Symantec have identified a new Trojan that appears to be targeting financial institutions. Dubbed Trojan.Stabuniq, the malware has been collecting information from infected systems potentially for the...

DEBIAN-CVE-2012-4565

The tcpillinoisinfo function in net/ipv4/tcpillinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcpcongestioncontrol illinois setting is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS by reading TCP stats...

CVE-2012-4508

CVE-2012-4508 is a race condition in the Linux kernel's ext4 extents handling (fs/ext4/extents.c) that, before version 3.4.16, allows a local unprivileged user to read data from a deleted file by reading an extent that isn’t properly marked uninitialized. The issue is fixed in the 3.4.16 update (...

Malware behind Microsoft Excel-based Sudoku generator

Sudoku is one such game that I believe will benefit your brain, but now not for your system. Peter Szabo from SophosLabs have identified a piece of malware that resides behind a Microsoft Excel-based Sudoku generator. The Malware developed in Visual Basic requires macros, a scripting language tha...

Malware behind Microsoft Excel-based Sudoku generator

Sudoku is one such game that I believe will benefit your brain, but now not for your system. Peter Szabo from SophosLabs have identified a piece of malware that resides behind a Microsoft Excel-based Sudoku generator. The Malware developed in Visual Basic requires macros, a scripting language tha...

DedeCMS member center classification management SQL injection 0day vulnerabilities can be obtained the administrator password-vulnerability warning-the black bar safety net

Need magicquotesgpc = Off,so that is tasteless. Occurs in the array key where the injection vulnerability,a little mean. Here is blind,is the trouble point can also use,you can write a tool,automated attendant ran about http://www.xxx.com /dede/member/mtypes. php? dopost=save Trojan: mtypename7'...

kernel: ext4: fix inconsistency in ext4_fill_flex_info()

The ext4fillflexinfo function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem...

yourphp cms-stored xss-vulnerability warning-the black bar safety net

yourphp is based on thinkphp framework for the development of the open source cms, there is a storage-typexssvulnerability In the demo of the cms when found this vulnerability, in order to have the power of persuasion, then using the official demo displayxssprocess, In yourphp official...

DIMIN Viewer 5.4.0 <= WriteAV Arbitrary Code Execution

!/usr/bin/perl DIMIN Viewer 5.4.0 = WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.dimin.net Vendor Decription: View images in countless formats, and apply a variety of effects with this small, fast, and powerful application. Dimin Viewer...

vBulletin Announcements Cookie Steal Vulnerability

If you get access to a forum with an acc that only has default acp, you can get all users information by creating a cookie stealer in announcements. vBulletin Announcements, by default has html enabled, so if you get access to a forum using other exploits and get a user with acp info, but it only...