3028 matches found
Oracle BI Publisher Mobile Service Unspecified Remote Information Disclosure (July 2014 CPU)
The remote Oracle Business Intelligence Publisher install is affected by an unspecified information disclosure vulnerability related to the 'Mobile Service' component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Design/Logic Flaw
Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Mobile Service...
CVE-2014-4249
CVE-2014-4249 affects Oracle Fusion Middleware 11.1.1.7’s BI Publisher Mobile Service. The vulnerability is an information-disclosure issue with unknown vectors that could affect confidentiality. Root cause and affected components are described as an unspecified vulnerability in the Mobile Servic...
Nelogic Nephp Publisher 4.5.2 - SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15584/info Nelogic Nephp Publisher is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Inout Ad server Ultimate Shell Upload Vulnerabilty
No description provided by source. ============================================================== Inout Ad server Ultimate -- Shell upload Vulnerabilty ============================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Date : july 9,2010...
Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection Vulnerability Vendor url:http://www.miniweb2.com/ Version:2.0 Price:250$ Published: 2010-06-10 Greetz to:Sid3^effects, MaYu...
Microsoft Publisher 2013 Crash PoC
No description provided by source. Title : Microsoft Publisher 2013 memory corruption Version : Microsoft Office Publisher professional Plus 2013 Date : 2012-11-11 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows 7...
ArticleLive (blogs.php?Id) 1.7.1.2 - SQL Injection Vulnerability
No description provided by source. Author : Baybora Product : ArticleLive Interspire Website Publisher Version : NX.1.7.1.2 and possibly earlier versions Download : http://www.interspire.com/ Price : $ 249 Site : www.1923turk.biz Vulnerable script: blogs.php?Id = SQL-injection...
ArticleLive (Interspire Website Publisher) SQL Injection Vulnerability
No description provided by source. Author : ra3ch Product : ArticleLive Interspire Website Publisher Price : N/A Site : www.dz4all.com/cc Dork : Website by Spokane Web Communications Risk : High Vulnerable script: news.asp?id= SQL-injection --------------------------------------------------------...
askSam 4.0 Web Publisher Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4670/info askSam is a database system. An optional component, askSam Web Publisher versions 1 and 4, is reportedly vulnerable to cross site scripting vulnerability in the asweb.exe or asweb4.exe component. This is due to ...
GWScripts News Publisher 1.0 author.file Write Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request using any...
RV Article Publisher CSRF Vulnerability
No description provided by source. Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...
Gnews Publisher Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21194/info Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...
Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22724/info Microsoft Office Publisher is prone to a remote denial-of-service vulnerability because the application fails to properly handle malformed files. Successfully exploiting this issue allows remote attackers to...
Windows Escalate UAC Protection Bypass
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
MS10-103: Vulnerabilities in Microsoft Publisher could allow remote code execution
Describes the security update that fixes the vulnerabilities in Microsoft Publisher that could allow remote code execution.INTRODUCTIONMicrosoft has released security bulletin MS10-103. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
Microsoft Publisher uninitialized pointer dereference
Uninitialized pointer dereference on file parsing...
Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103) - Ver2 (CVE-2010-2569)
Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...
Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091) - Ver2 (CVE-2011-3410)
A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...
Microsoft Publisher Invalid Pointer Code Execution - Ver2 (CVE-2011-3411)
A code execution inclusion vulnerability has been reported in Microsoft Office Publisher. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...