KLA10029 ACE vulnerabilities in Adobe Photoshop

Buffer overflow vulnerabilities were found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. These vulnerabilities can be exploited from the network at a point related to an unknown application via a specially designed file or TIFF image with...

KLA10038 Multiple ACE vulnerabilities in Adobe Illustrator

Multiple serious vulnerabilities have been found in Adobe Illustrator. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service at a point related to unspecified vectors. Original advisories Adobe bulletin Related products Adobe-Illustrator CVE list...

Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64

CVE-2009-2409 deprecate MD2 in SSL cert validation Kaminsky CVE-2009-3873 OpenJDK JPEG Image Writer quantization problem 6862968 CVE-2009-3875 OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities 6863503 CVE-2009-3876 OpenJDK ASN.1/DER input stream parser denial of service 68649...

KLA10300 ACE vulnerability in GE IP products

A buffer overflow was found in GE IP products. By exploiting this vulnerability malicious users can execute arbitrary code and commands. This vulnerability can be exploited remotely via a specially designed input. Original advisories GE IP bulletin Exploitation Malware exists for this...

KLA10232 ACE vulnerability in KMPlayer

An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Related products KMPlayer CVE list CVE-2012-3841 critical Solution Update to...

KLA10041 ACE vulnerability in Adobe Flash

An unspecified vulnerability was found in Adobe Flash Professional. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via unknown vectors.. Original advisories Adobe bulletin Related products Adobe-Flash-CS3 Adobe-Flash-CS4 Adobe-Flas...

Cisco Patches Vulnerabilities in VPN Client, ACE Product

Cisco warned customers Wednesday of several vulnerabilities in its AnyConnect Secure Mobility virtual private network VPN client, claiming that if not patched, the VPN software could be exploited by a remote attacker. The holes are present in versions of Cisco’s VPN client for Microsoft’s Windows...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting the following products: Cisco ASA 5500 Series Adaptive Security Appliances Cisco ASA Cisco Catalyst 6500 Series ASA Service Module Cisco ASASM Cisco AnyConnect Secure Mobility Client Cisco Application Control Engine...

CVE-2012-3063

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

Design/Logic Flaw

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

CVE-2012-3063

CVE-2012-3063 affects Cisco ACE (Application Control Engine) in multicontext mode. Cisco ACE software versions before A4(2.3) and A5(1.1) fail to share a management IP address correctly among multiple contexts, enabling remote authenticated administrators to bypass access restrictions and read/mo...

CVE-2012-3063

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

KLA10030 ACE vulnerabilities in Adobe Photoshop

Multiple serious vulnerabilities have been found in Adobe Photoshop. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. Use-after-free vulnerability can be exploited via specially designed TIFF image. 2. Buffer overflow...

KLA10383 ACE vulnerability in VMware

Multiple critical vulnerabilities have been found in VMware. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper RPC handling can be exploited by guest OS users via specially designed...

KLA10326 ACE vulnerability in JustSystems products

A buffer overflow was found in JustSystems products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed image. Original advisories - Related products Ichitaro-viewer Shuriken Ichitaro-Government...

Tube Ace - q Cross-Site Scripting

Tube Ace - q Cross-Site Scripting source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Tube Ace - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Tube Ace Cross Site Scripting

Exploit Title: Tube AceAdult PHP Tube Script XSS Vulnerability Date: 15/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan...

CVE-2012-1029

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...