Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://wikiwebhelp.org Software Link: http://sourceforge.net/projects/wwh/files/wwh-0.3.9.7z/download Version: 0.3.9 Gr33Tz: @aviadgolan , @benhayak,...

Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: Multiple Stored XSS Vulnerabilities in Wiki Web Help. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://wikiwebhelp.org Software Link:...

Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

Ubuntu 10.04 LTS : openoffice.org vulnerability (USN-1537-1)

It was discovered that OpenOffice.org incorrectly handled certain encryption tags in Open Document Text .odt files. If a user were tricked into opening a specially crafted file, an attacker could cause OpenOffice.org to crash or possibly execute arbitrary code with the privileges of the user...

DEBIAN-CVE-2012-3465

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/sanitizehelper.rb in the striptags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup...

PT-2012-4735

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.16 Ruby on Rails versions 3.0.x through 3.0.16 Ruby on Rails versions 3.1.x through 3.1.7 Ruby on Rails versions 3.2.x through 3.2.7 Description A cross-site scripting XSS issue exists in the strip tags help...

Scientific Linux Security Update : cups on SL4.x i386/x86_64

Problem description : Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 Alin Rad Pop discovered a flaw in ...

CentOS Update for finch CESA-2012:1102 centos5

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2012:1102 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Social Engine v4.2.5 - Multiple Web Vulnerabilities

Document Title: =============== Social Engine v4.2.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=672 Release Date: ============= 2012-07-30 Vulnerability Laboratory ID VL-ID: ==================================== 672...

Social Engine 4 Cross Site Scripting

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...

libexif project security advisory July 12, 2012

libexif project security advisory July 12, 2012 PROBLEM DESCRIPTION A number of remotely exploitable issues were discovered in libexif and exif, with effects ranging from information leakage to potential remote code execution. The issues are: CVE-2012-2812: A heap-based out-of-bounds array read i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the course-tags functionality in tag/coursetagsmore.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 sort or 2 show parameter...

PT-2012-1830

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the course-tags functionality. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

CVE-2012-2814

Buffer overflow in the exifentryformatvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

ALPINE-CVE-2012-2837

The mnoteolympusentrygetvalue function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service divide-by-zero error via an image with crafted EXIF tags that are not properly handled during the formatting of EX...

DEBIAN-CVE-2012-2836

The exifdataloaddata function in exif-data.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory via crafted EXIF tags in an image...

DEBIAN-CVE-2012-2814

Buffer overflow in the exifentryformatvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

CVE-2012-2837

The mnoteolympusentrygetvalue function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service divide-by-zero error via an image with crafted EXIF tags that are not properly handled during the formatting of EX...

DEBIAN-CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...