Microsoft Word RTF File Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user, which can lead to a complete compromise of an affected computer. Technologies Affected Microsoft Office...

MS12-066: Description of the security update for InfoPath 2007 Service Pack 3: October 9, 2012

None None...

MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 QFE: October 9, 2012

None None...

Hackers disrupt Interpol website against Anti-Islam film

A hacker group "Kosova Hacker's Security" based in the Middle East take down Interpol website yesterday. According to claim of Hackers, they are doing this cyber attack on a law enforcement agency to show their protest against the controversial Anti-Islam film, Innocence of Muslims. According to...

IBM WebSphere Application Server 7.0 < Fix Pack 25 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 25 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Several errors exist related to SSL/TLS that can allow an attacker to carry out denial of service attacks against the...

IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An error exists related to 'Application Snoop Servlet' and missing access controls. This error can allow sensitive information...

CVE-2012-4912

CVE-2012-4912 describes an XSS vulnerability in the Novell GroupWise WebAccess component. Affected products include GroupWise 8.x prior to 8.0.3 SP, and 2012 versions prior to SP1. The issue allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email signature, leading...

IBM DB2 10.1 < Fix Pack 1 Multiple Vulnerabilities

According to its version, the installation of DB2 10.1 running on the remote host is affected by one or more of the following issues : - An error exists in the stored procedure 'SQLJ.DB2INSTALLJAR' that can allow unauthorized replacement of Jar files. Note this vulnerability only affects the...

DSquare Exploit Pack: D2SEC_HORDE_BACKDOOR

Name| d2sechordebackdoor ---|--- CVE| CVE-2012-0209 Exploit Pack| D2ExploitPack Description| d2sechordebackdoor Notes|...

DSquare Exploit Pack: D2SEC_PMA_BACKDOOR

Name| d2secpmabackdoor ---|--- CVE| CVE-2012-5159 Exploit Pack| D2ExploitPack Description| d2secpmabackdoor.py Notes|...

CVE-2011-3827

The iCalendar component in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted date-time string in a .ics attachment...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...

IBM WebSphere MQ 7.1 < 7.1.0.1 MQ SVRCONN Channels Security Configuration Bypass

The version of IBM WebSphere MQ server 7.1 installed on the remote Windows host is missing fix pack 7.1.0.1 or later. It is, therefore, affected by a vulnerability where client applications can bypass the security configuration setup on an MQ SVRCONN channel, allowing unauthorized users access to...

MS12-062: Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528)

The version of Microsoft System Center Configuration Manager, formerly known as Systems Management Server, installed on the remote host is potentially affected by a reflected cross-site scripting vulnerability. By tricking a user into clicking a specially crafted link, an attacker could gain...

IBM WebSphere Application Server跨站脚本执行和安全限制绕过漏洞

BUGTRAQ ID: 51559 CVE ID: CVE-2011-5065 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server WAS Web Services Feature Pack 6.1.0.41之前版本中存在XSS漏洞，可允许远程攻击者注入任意Web脚本或HTML脚本。 0 IBM Websphere Application Server 6.1.x 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（72336）以及相应补丁:...

DSquare Exploit Pack: D2SEC_TUNNELBLICK

Name| d2sectunnelblick ---|--- CVE| CVE-2012-3485 Exploit Pack| D2ExploitPack Description| d2sectunnelblick Notes|...

DSquare Exploit Pack: D2SEC_EMCAXWA

Name| d2secemcaxwa ---|--- CVE| CVE-2012-2289 Exploit Pack| D2ExploitPack Description| EMC ApplicationXtender Web Access .NET Viewer ActiveX Remote Code Execution Vulnerability Notes|...

Microsoft Windows SMB Registry : Windows 8 / Server 2012 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 8 / Server 2012 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61647; scriptversion"1.6";...

PT-2012-3595 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

PT-2012-3594 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...