3706 matches found
Apple Releases QuickTime 7.7.5
Apple has released QuickTime 7.7.5 for Windows operating systems to address multiple vulnerabilities, which may lead to an unexpected application termination or arbitrary code execution. US-CERT encourages users and administrators to review Apple Support Article HT6151 and apply any necessary...
phpMBBcms 004 /modul/article/article.php SQL注入漏洞
No description provided by source...
Security Update for Microsoft .NET Framework 3.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2898866)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Apple Releases iTunes 11.1.4
Apple has released a security update for Apple iTunes 11.1.4 to address multiple vulnerabilities. These vulnerabilities could allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple Support Article HT6001 and...
Discuz某处XSS劫持UC_KEY（XSS应用详细过程）
简要描述： Discuz某处XSS劫持UCKEY到拿webshell。 XSS应用的详细过程。 详细说明： 漏洞： 这个漏洞的位置在Discuz的门户功能处。 在发表文章时，打开“编辑源码”功能时，写入任意XSS CODE后，再进入和输出都没有过滤。导致存储型XSS。 大家都知道，这里的XSS虽然可以劫持到用户和管理的Cookies，但是没什么用，无法登陆。 那么，我们可以想办法拿XSS来干点其他的，比如劫持管理员后台内容，如UCKEY等。 门槛： 因为默认安装情况下这个门户功能是没有配置的。 所以管理员需要手动配置门户功能。大部分都会开启门户。...
VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX (remote check)
VMware ESXi and ESX unauthorized file access through vCenter Server and ESX OpenVAS Vulnerability Test $Id: gbVMSA-2013-0016remote.nasl 6074 2017-05-05 09:03:14Z teissa $ VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX remote check Authors: Michael Meyer...
Thinksaas 越权+SQL注入#1
简要描述： Thinksaas SQL注入1 详细说明： /app/article/action/edit.php case "do" : $articleid = intval $POST 'articleid' ; $cateid = intval $POST 'cateid' ; $title = tsClean $POST 'title' ;//过滤 $content = tsClean $POST 'content' ;//过滤 if $TSUSER 'user' 'isadmin' == 0 // 过滤内容开始 aac 'system' -antiWord $title...
Apple Releases Security Update for Safari on OS X
Apple has released security updates for Safari 6.1 to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to execute arbitrary code, information disclosure, or a cross-site scripting condition. Safari 6.1 Webkit updates are available for the following versions: O...
Apple Releases Security Update for Java on OS X
Apple has released a security update for Java on Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7 or later, OS X Lion Server v10.7 or later, and OS X Mountain Lion 10.8 or later to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code wi...
Security Update for Microsoft .NET Framework 3.5 on Windows 8 (KB2863243)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Linux Kernel Patches For Linux Kernel Security
Hi forks! I release an article for linux kernel security. - http://www.x90c.org/articles/linuxkernelpatches.txt x90c...
Apple Releases iOS 7
Apple has released iOS 7 for the iPhone 4 and later, iPod touch 5th generation and later, and iPad 2 and later to address multiple vulnerabilities. These vulnerabilities could allow remote attackers to execute arbitrary code, cause a cross-site scripting attack, bypass security restrictions, or...
Microsoft Releases Security Advisory for Internet Explorer
Microsoft has released Security Advisory 2887505 regarding a remote code execution vulnerability CVE-2013-3893 impacting Internet Explorer versions 6 through 11. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability in Internet Explorer 8 and Internet Explorer 9. The...
Cross site scripting
Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4138
Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4124 samba nttrans dos private exploit
Hi Forks! It's my samba private exploit and article of it. the security bug occurs while nttrans reply in samba daemon source code tree. the remote dos exploit that i copied from another nttrans exploit in 2003. and can't test it yet, check it out! CVE-2013-4124 samba dos private exploit: -...
Microsoft Releases Security Advisory
Microsoft has released Security Advisory 2862973 impacting applications and services using certificates with the MD5 hashing algorithm. Usage of the MD5 hash algorithm in certificates could allow an attacker to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. US-CERT...
Security Update for Microsoft .NET Framework 4.5 on Windows 8 (KB2833958)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
PHPCMS V9 article submission CSRF vulnerability-vulnerability warning-the black bar safety net
CSRF can lead to add back the administrator account. ! In Member center, article submission, in source fill in: Exploit code: Super administrator the myform. submit If the administrator in the background of the audit, it will trigger JS that leads to add in Admin. ! ! Vulnerability proof: !...
