PT-2013-4210 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 through 10 Description: The Protected Mode feature in Microsoft Internet Explorer does not properly implement the Integrity Access Level protection mechanism. This allows remote attackers to obtain...

(Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

MS13-005 HWND_BROADCAST Low to Medium Integrity Privilege Escalation

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

MS13-005 HWND_BROADCAST Low to Medium Integrity Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/exploit/exe' class...

OpenCMS 8.5.1 Cross Site Scripting Vulnerability

OpenCMS version 8.5.1 suffers from a cross site scripting vulnerability. Product: OpenCms Vendor: Alkacon Software Vulnerable Versions: 8.5.1 and probably prior Tested Version: 8.5.1 Vendor Notification: June 12, 2013 Vendor Patch: July 10, 2013 Public Disclosure: July 17, 2013 Vulnerability Type...

Memory disclosure with specially crafted HTTP backend responses

Memory disclosure with specially crafted HTTP backend responses Severity: medium CVE-2013-2070 Not vulnerable: 1.5.0+, 1.4.1+, 1.2.9+ Vulnerable: 1.1.4-1.2.8, 1.3.9-1.4.0...

Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities

Document Title: =============== Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=790 Release Date: ============= 2013-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 790...

Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability

Title: ====== Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability Date: ===== 2013-07-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 VL-ID: ===== 776 Common Vulnerability Scoring System:...

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System:...

Nikon CoolPix L Series Fw 1.0 Information Disclosure

Title: ====== Nikon CoolPix L Series Fw 1.0 - Information Disclosure Issue Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1014 VL-ID: ===== 1014 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting

Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1011 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID VL-ID: ==================================== 1011 Comm...

Facebook Bug Bounty #8 - Multiple Vulnerabilities

Document Title: =============== Facebook Bug Bounty 8 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=993 Release Date: ============= 2013-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 993 Common...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Mobile Atlas Creator 1.9.12 - Persistent Command Injection Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring...

Mobile Atlas Creator 1.9.12 Command Injection

Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Solaris 10 (sparc) : 119117-54 (deprecated)

Evolution 1.4.6 patch. Date this patch was last updated by Sun : Sep/13/14 This plugin has been deprecated and either replaced with individual 119117 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...

iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=991 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 991...

Barracuda CudaTel Communication Server 2.6.002.040 XSS

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...