Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Firefox crypto.generateCRMFRequest command execution

Added: 08/21/2014 CVE: CVE-2013-1710 BID: 61900 OSVDB: 96019 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A vulnerability in the implementation of the crypto.generateCRMFRequest javascript method allows command execution...

FBCacheView v1.03 - View Facebook images stored in the cache of your Web browser

FBCacheView is a simple tool that scans the cache of your Web browser Internet Explorer, Firefox, or Chrome, and lists all images displayed in Facebook pages that you previously visited, including profile pictures, images uploaded to Facebook, and images taken from other Web sites. For every...

RHEL 5 / 6 : flash-plugin (RHSA-2014:1051)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1051 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Microsoft SQL Server Master Data Services CVE-2014-1820 Cross Site Scripting Vulnerability

Description Microsoft SQL Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Technologie...

IBM Sametime Meet Server 8.5 Cross Site Scripting

Exploit Title: IBM Sametime Meet Server 8.5 Reflect Cross Site Script Google Dork: intitle:"Meeting Center - IBM Lotus Sametime" Date: 11/08/2014 CVSS Score: http://nvd.nist.gov/cvss.cfm?calculator&version=2&vector=AV:N/AC:M/Au:N/C:P/I:N/A:N%29 CVE-ID:...

JVN#09717399: Piwigo vulnerable to cross-site scripting

Piwigo is a software to manage and host image files on the web. Piwigo contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Apply a patch Apply the patch according to the information provided by the developer. According to t...

Sandcat Browser 5 - A Penetration-Oriented Browser

Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and pen-testers. He...

RedHat Update for firefox RHSA-2014:0919-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: guacamole-server-0.8.4-3.fc20

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop prot ocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

[SECURITY] Fedora 19 Update: firefox-31.0-1.fc19

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Using the vSphere MOB (Managed Object Browser) to Troubleshoot Snapshot Creation

Purpose This article documents the procedure for manually creating a vSphere VM snapshot using the Managed Object Browser MOB. Solution Start by identifying the Managed Object Reference-ID MORef-ID of the VM for which the snapshot will be created. If the VM is being protected by Veeam Backup &...

[SECURITY] Fedora 20 Update: firefox-31.0-1.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2014:0919 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System...

USN-2295-1: Firefox vulnerabilities

Christian Holler, David Keeler, Byron Campen, Gary Kwong, Jesse Ruderman, Andrew McCreight, Alon Zakai, Bobby Holley, Jonathan Watt, Shu-yu Guo, Steve Fink, Terrence Cole, Gijs Kruitbosch and Cătălin Badea discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a...

JVN#36028879: Meridian vulnerable to cross-site scripting

Meridian provided by Nexa Technologies is a software for market trading. Meridian contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by...

Google Chrome < 36.0.1985.125 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 36.0.1985.125. It is, therefore, affected by multiple vulnerabilities allowing an attacker to compromise the integrity of the system via unspecified vectors. C Tenable Network Security, Inc...

Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

JVN#80583739: Cybozu Garoon vulnerable to cross-site scritping

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the function "Notices portlet", which may result in a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user that is logged on. Solution Update the...

Sqlbuddy 1.3.2 / 1.3.3 Cross Site Scripting

Exploit Title : Sqlbuddy 1.3.2 & 1.3.3 Reflected Cross-Site Scripting Author : Govind Singh aka NullPort Vendor : http://sqlbuddy.com/ Download Link : https://github.com/calvinlough/sqlbuddy/raw/gh-pages/sqlbuddy.zip Sqlbuddy 1.3.3 Date : 14/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love...