4732 matches found
(SWAT): Absent CSRF protection in various Samba web configuration formulars
Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...
(SWAT): Absent CSRF protection in various Samba web configuration formulars
Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...
Android Malware Increasing, AutoRun Attacks Still Prevalent
The recent trend of attackers focusing their attention on mobile platforms such as Android, Symbian and iOs is continuing to accelerate, researchers say, and the threats to smartphones are becoming more and more sophisticated and dangerous. Android is becoming the focus of much of the attention...
Pidgin < 2.10.0 Multiple Vulnerabilities
The version of Pidgin installed on the remote host is earlier than 2.10.0. As such, it is potentially affected by the following issues : - A code execution vulnerability caused by clicking on a file:// URI received in an IM that Pidgin will attempt to execute. This can result in the execution of...
Code injection
The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter...
Microsoft Internet Explorer Telnet URI Handler Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers execute arbitrary remote code. An attacker can exploit this issue by enticing a legitimate user to use a vulnerable version of the application to access an HTML file from a network share location that contains...
Fedora 14 : cifs-utils-4.8.1-7.fc14 (2011-9847)
This is an update that fixes a problem with handling embedded newlines in share names or mountpoints. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
PowerZip Insecure Library Loading Vulnerability
This host is installed with PowerZip and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: gbpowerzipinsecurelibloadvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ PowerZip Insecure Library Loading Vulnerability Authors: Rachana Shetty Copyright: Copyright c 2011...
Foxit Reader ActiveX Control Buffer Overflow and Insecure Library Loading Vulnerabilities
Two vulnerabilities have been discovered in Foxit Reader, which can be exploited by malicious people to compromise a user's system. 1 A boundary error in the FoxitReaderOCX ActiveX control when processing the "OpenFile" method can be exploited to cause a heap-based buffer overflow via an overly...
Google Removes .CO.CC Subdomains Over Phishing, Spam Concerns
In a rare and sweeping move, Google has removed all of the sites hosted on .co.cc domains from its search results, saying that because such a large percentage of the sites on that freehosting provider are low-quality or spammy, they decided to de-index all of them. The .co.cc domain is well-known...
SA-CONTRIB-2011-027 -Facebook Share - Cross Site Scripting (XSS)
This module enables Drupal site administrators to add a Facebook Share button to selected content type nodes. The module doesn't sufficiently check the override text or button size input fields on the module configuration form to prevent against an XSS exploit. This vulnerability is mitigated by...
xAurora 10.00 - RSRC32.dll DLL Loading Arbitrary Code Execution
xAurora 10.00 - RSRC32.dll DLL Loading Arbitrary Code Execution / source: https://www.securityfocus.com/bid/48432/info xAurora is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application...
xAurora 10.00 - 'RSRC32.dll' DLL Loading Arbitrary Code Execution
/ source: https://www.securityfocus.com/bid/48432/info xAurora is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...
Box.net File Share Detection Email Recipient Detection
Binary data 5949.prm...