The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software exists due to a flaw in its memory handling. Exploiting this vulnerability allows a malicious actor to bypass access controls and carry out further attacks remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software exists due to a flaw in its memory handling. Exploiting this vulnerability allows a malicious actor to bypass access controls and carry out further attacks remotely...

IBM Optim Workload Replay Security Bypass Vulnerability

IBM InfoSphere Optim Workload Replay is an IBM solution for replaying real database production activities and providing reports on the impact of changes and identifying problems quickly. A security vulnerability exists in IBM Optim Workload Replay. The vulnerability allows an attacker to bypass...

WordPress CartPress Plugin Zero Day Disclosure

Another round of WordPress vulnerability disclosures has taken place with details made public on a handful of unpatched bugs in the CartPress ecommerce plugin. These disclosures come on the heels of a separate disclosure of a zero-day in the WordPress core engine. Those vulnerabilities have since...

Profile Builder < 2.1.4 - Missing Access Controls

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Missing Access Controls security vulnerability...

HP Integrated Lights-Out Security Bypass Vulnerability

HP Integrated Lights-Out 2, 3, and 4 iLO 2, iLO 3, and iLO 4 is an embedded server management technology from Hewlett-Packard HP in the United States that monitors and maintains server operations, remote control of servers, and more through an integrated remote management port. A security...

Yoast WordPress Google Analytics Plugin Patched

Update: Yoast on Thursday patched a cross-site scripting vulnerability in its Google Analytics WordPress plugin that was ripe for remote code execution. The plugin has been downloaded 6.8 million times according to statistics on the Yoast website; Yoast said there have been no public exploits. Th...

Government Report Critical of FAA Security Controls

The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...

ownCloud Multiple Vulnerabilities -01 (Feb 2015)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

SAP ERP Dealer Portal Elevation of Privilege Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. A security vulnerability exists in Dealer Portal for S...

RedaxScript 2.1.0 Privilege Escalation

Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1.0 suffers from a privilege Escalation vulnerability. T...

RedaxScript 2.1.0 - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1....

RedaxScript 2.1.0 - Privilege Escalation

RedaxScript 2.1.0 - Privilege Escalation ​​​ Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1.0 suffers...

RedaxScript 2.1.0 - Privilege Escalation

​​​ Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1.0 suffers from a privilege Escalation vulnerabilit...

Oracle Solaris Third-Party Patch Update : ipmitool (cve_2011_4339_access_controls)

The remote Solaris system is missing necessary patches to address security updates : - ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pi...

RHEL 4 : JBoss EWP (RHSA-2013:0197)

Updated JBoss Enterprise Web Platform 5.2.0 packages that fix multiple security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...

Mozilla.org Cross Site Scripting

Domains: http://lxr.mozilla.org/ http://mxr.mozilla.org/ The two domains above are almost the same Websites information: lxr.mozilla.org, mxr.mozilla.org are cross references designed to display the Mozilla source code. The sources displayed are those that are currently checked in to the mainline...

Obamacare Marketplaces Could Improve Information Security

The health insurance marketplaces instituted by the Affordable Care Act and through which tens of millions of Americans have signed up for medical coverage, aren’t doing a bad job of securing sensitive personal information but they could certainly be doing a better job, according a new analysis. ...