MS12-054: Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594)

The remote Windows host is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists in Windows networking components. The vulnerability is due to the service not properly handling specially crafted RAP requests. CVE-2012-1850 - A remote code execution...

Microsoft Patches Critical MS12-060 Office Flaw Being Used in Targeted Attacks

Microsoft on Tuesday fixed a critical vulnerability in a component of Office, SQL Server and other widely deployed applications that attackers already are using in targeted attacks. The flaw in the Microsoft Common Controls component, which was one of the 26 vulnerabilities fixed in nine bulletin...

MS12-054: Vulnerabilities in Windows networking components could allow remote code execution: August 14, 2012

Resolves vulnerabilities in Microsoft Windows that could allow remote code execution if an attacker sends a specially crafted response to a Windows print spooler request.INTRODUCTIONMicrosoft has released security bulletin MS12-054. To view the complete security bulletin, go to one of the followi...

Microsoft Windows Print Spooler Format String Code Execution (MS12-054; CVE-2012-1851)

A remote code execution vulnerability has been reported in the Windows Print Spooler service...

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler service. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the complete compromise of affected computers. Technologies Affected...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

smb-print-text NSE Script

Attempts to print text on a shared printer by calling Print Spooler Service RPC functions. In order to use the script, at least one printer needs to be shared over SMB. If no printer is specified, script tries to enumerate existing ones by calling LANMAN API which might not be always available...

Scientific Linux Security Update : foomatic on SL6.x i386/x86_64

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. foomatic-rip is a print filter written in C. An...

Scientific Linux Security Update : foomatic on SL4.x, SL5.x i386/x86_64

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. The package also includes spooler-independent command line interfaces to manipulate queues and to print files and manipulate print jobs. foomatic-rip is a print filter written in Perl...

Scientific Linux Security Update : cups on SL5.x i386/x86_64 (20120221)

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A heap-based buffer overflow flaw was found in the Lempel-Ziv-Welch LZW decompression algorithm implementation used by the CUPS GIF image format reader. An attacker could create...

PT-2012-1923 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: A cross-site scripting issue exists in the print object function in lib/datalib.php. This occurs when a developer debugging script is enabled, allowing remot...

PT-2012-2943 · Tiki · Tikiwiki Cms/Groupware

Name of the Vulnerable Software and Affected Versions: TikiWiki CMS/Groupware versions prior to 6.7 LTS and prior to 8.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a crafted serialized object. This can be achieved through several parameters, including...

CUPS: Multiple vulnerabilities

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to execute arbitrary code using specially...

RedHat Update for foomatic RHSA-2011:1110-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

WordPress PDF And Print Button Joliprint 1.3.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Plugin PDF & Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

cups-queue-info NSE Script

Lists currently queued print jobs of the remote CUPS service grouped by printer. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline, http.truncated-ok, http.useragent See the documentatio...

Fortune3 Cross Site Scripting

Exploit Title: Fortune3 Cross Site Scripting Date: 18.04.2012 Author: Sony Software Link: http://www.fortune3.com/ Google Dorks: Powered by FORTUNE3 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/fortune3-cross-site-scripting.html...

Joomla com_jomestate SQLi vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla comjomestate SQLi vulnerability Google Dork: inurl:comjomestate Date: 10/April/2012 Author: R00T3R - 4L E-Mail: email protected Software Link: http://extensions.joomla.org/extensions/vertical-markets/real-estate/10480...