4039 matches found
September 2014 Microsoft Patch Tuesday security bulletins
The Operation SnowMan espionage campaign, which targeted military intelligence earlier this year via an Internet Explorer zero day, exposed a weak spot in Microsoft’s vulnerability management efforts. What was unique about the SnowMan operation is that it included a check as to whether the...
Microsoft Windows Task Scheduler Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with the Local system account. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft...
MS14-054: Vulnerability in Windows Task Scheduler could allow elevation of privilege: September 9, 2014
None None...
RHEL 5 : MRG (RHSA-2013:1295)
Updated Grid component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...
CVE-2014-4579
Cross-site scripting XSS vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2014-4579
Cross-site scripting XSS vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2014-4579
CVE-2014-4579 is an XSS vulnerability in the WordPress Appointment Scheduler Plugin (versions
AT 3.1.8 - Formatted Time Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3886/info at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain. Under some circumstances, at does not correctly handle time...
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
No description provided by source. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
FreeBSD 5.5/6.x Scheduler Policy Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20517/info FreeBSD is prone to a local denial-of-service vulnerability because the kernel fails to require superuser privileges to perform a sensitive operation. An attacker may leverage this issue to consume all CPU...
IlohaMail Webmail Stored XSS
No description provided by source. !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...
Eventy Online Scheduler 1.8 - Multiple Vulnerabilities
No description provided by source. Eventy Online Scheduler V1.8 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Achievo <= 1.3.4 xss
No description provided by source. Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Achievo 1. Advisory Information Title: Multiple XSS in Achievo Advisory ID: BONSAI-2009-0101 Advisory URL:...
Microsoft Internet Explorer 5.0.1/5.5 'mstask.exe' CPU Consumption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to cause CPU utilization DoS. Sending malformed...
FreeBSD <= 6.1-RELEASE-p10 (scheduler) Local Denial of Service Exploit
No description provided by source. / FreeBSD cvs commit: src/sys/posix4/p10031b.c davidxu 2006-05-21 00:40:38 UTC Log: Don't allow non-root user to set a scheduler policy, otherwise this could be a local DOS. lol lol, thatz true. kokanin@gmail lolling it out in '06 !%&%20061013=! tested on FreeBS...
MacOSXLabs RsyncX 2.1 Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11212/info RsyncX is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker may exploit...
WordPress Appointment Scheduler Plugin <= 1.5 - XSS
Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...
openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)
The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used...