2657 matches found
Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)
An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...
OpenXchange crossite scripting
Crossite scripting on MS Office and EML documents viewing...
[SECURITY] Fedora 20 Update: mantis-1.2.17-1.fc20
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...
[SECURITY] Fedora 19 Update: mantis-1.2.17-1.fc19
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.17...
My PDF Creator DE DM 1.4 iOS - Multiple Vulnerabilities
My PDF Creator DE DM 1.4 iOS - Multiple Vulnerabilities Document Title: =============== My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1201 Release Date: ============= 2014-02-16 Vulnerability...
MS-SQL Server Protocol - General Settings - Ver2 (CVE-2002-1123)
...
[THC-Hydra 7.5] Fast Parallel Network Logon Cracker
Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...
MS Exchange Server Remote Code Execution Vulnerabilities (2915705)
This host is missing a critical security update according to Microsoft Bulletin MS13-105. OpenVAS Vulnerability Test $Id: secpodms13-105.nasl 6079 2017-05-08 09:03:33Z teissa $ MS Exchange Server Remote Code Execution Vulnerabilities 2915705 Authors: Antu Sanadi Copyright: Copyright C 2013 SecPod...
Fedora Update for mantis FEDORA-2013-20176
Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2013-20176 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 18 Update: mantis-1.2.15-3.fc18
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.15...
[SECURITY] Fedora 19 Update: mantis-1.2.15-3.fc19
Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.15...
[aidSQL] PHP Application For SQL Injection Detection & Exploitation
aidSQL a PHP application provided for detecting security holes in your website/s. It’s a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. The tool provides pen-testing capabilities for MS-SQL 2000, MySQL 5 and the author promises ...
22 years-old Chartered Accountant student hacks into Celebrities E-taxation Accounts
Last week a 21-year-old chartered accountant student from Hyderabad was arrested for hacking into E-taxation Account of Industrialist Anil Ambani. During the probe Mumbai Police's crime branch has emerged that Anil Ambani's account was also fraudulently accessed from Noida. After investigation,...
Design/Logic Flaw
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll...
CVE-2013-3893
CVE-2013-3893 is a use-after-free in mshtml.dll (Internet Explorer) specifically in SetMouseCapture, exploited via crafted JavaScript (notably through ms-help URLs) to achieve remote code execution across IE 6–11. Connected KEV/CISA entries confirm active exploitation in the wild and classify it ...
CVE-2013-3893
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll...
CVE-2013-3893
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll...
CVE-2013-3485
Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 api-ms-win-core-localregistry-l1-1-0.dll file in the current working directory...
CVE-2013-3485
CVE-2013-3485 describes a Windows vulnerability in Soda PDF (v4.x/v5.x variants referenced) where local users can exploit insecure library loading via untrusted search path by placing a Trojan horse DLL in the current working directory. Specifically, loading (1) dwmapi.dll or (2) api-ms-win-core-...
CVE-2013-3485
Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 api-ms-win-core-localregistry-l1-1-0.dll file in the current working directory...