CVE-2018-0511

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

WordPress WP Retina 2x Plugin Cross-Site Scripting Vulnerability

WP Retina 2x is an image creation and display plugin used in WordPress open source blogging system. A cross-site scripting vulnerability exists in WordPress WP Retina 2x versions prior to 5.2.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

JVN#30636823: WordPress plugin "WP Retina 2x" vulnerable to cross-site scripting

The WordPress plugin "WP Retina 2x" contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. Products Affected ...

WP Retina 2x <= 5.2.0 - Cross-Site Scripting (XSS)

The WP Retina 2x WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Thunderstrike — Infecting Apple MacBooks with EFI Bootkit via Thunderbolt Ports

A security researcher has discovered an easy way to infect Apple’s Macintosh computers with an unusual kind of malware using its own Thunderbolt port. The hack was presented by programming expert Trammell Hudson at the annual Chaos Computer Congress 30C3 in Hamburg Germany. He demonstrated that i...

Firefox 18 Brings 21 Updates, Fixes Nearly 3000 Bugs

Developers at Mozilla have pushed out the latest build of their flagship Firefox browser, fixing several security and stability issues for Windows, Mac, Linux and Android platforms. 2917 bugs were patched in total, while 21 security updates — 12 critical, seven high, one moderate – are addressed ...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

CVE-2011-3337

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/...

Code injection

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/...

CVE-2011-3337

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/...

eEye Retina Audit ID 2499权限提升漏洞

CVE ID: CVE-2011-3337 eEye Retina Network Security Scanner可针对目标系统执行多种审查，进行安全漏洞评估测试。 eEye Retina在实现上存在安全漏洞，可被恶意本地用户利用获取提升的权限。 此漏洞源于Audit ID 2499 "Gauntlet Firewall For UNIX Buffer Overflow"在"/usr/local"文件夹中执行特定文件，可通过在 "/usr/local"文件夹中放置恶意文件执行任意代码。 eEye Retina Network Security Scanner 5.x 厂商补丁： eEy...

eEye Retina audit script could execute untrusted programs as root

Overview eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular audit ID 2499 uses find1 and execute -exec when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an...

CVE-2009-3859

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

Buffer overflow

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

CVE-2009-3859

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

CVE-2009-3859

CVE-2009-3859 is a buffer overflow in eEye Retina WiFi Scanner 1.0.8.68 (used in Retina Network Security Scanner 5.10.14) triggered by processing a specially crafted .rws file with a long RWS010 entry. The issue can cause a denial of service (application crash) and, per sources, may allow arbitra...

KLA10417 ACE vulnerability in eEye Retina Network Security

A buffer overflow was found in eEye Retina Network Security. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RWS file. Original advisories - Exploitation Public exploits...

eEye Retina Wireless Scanner .rws Handling Buffer Overflow

The version of Retina Wireless Scanner installed on the remote host has a local buffer overflow vulnerability. A remote attacker could exploit this issue by tricking a user into opening a malformed .rws file. This could cause the program to crash or possibly result in the execution of arbitrary...

eEye Retina Network Security Scanner Detection

Retina Network Security Scanner is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39807; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"eEye Retina Network Security Scann...

eEye Retina Wireless Scanner (Standalone) Detection

Retina Wireless Scanner is installed on the remote host. This program is currently installed as a standalone application. Please note it is no longer distributed in this manner, and is now included with Retina Network Security Scanner. C Tenable Network Security, Inc. include"compat.inc"; if...