WordPress TDO Mini Forms Arbitrary File Upload

Exploit Title: Wordpress "TDO Mini Forms" File Upload Vulnerability Google Dork: "tdomf-upload-inline.php?tdomfformid=1 index" Date: 31/9/12 Exploit Author: HodLuM Vendor Homepage: unknown Software Link: http://thedeadone.net/download/tdo-mini-forms-wordpress-plugin/ Version: All Tested on: 2.x.x...

CVE-2009-5130

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

Code injection

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

CVE-2009-5130

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

Malware Campaign Targeting BlackBerry

Websense ThreatSeeker Network intercepted a malware campaign targeting BlackBerry customers. These fake emails state that the recipient has successfully created a BlackBerry ID. According to Security Labs, those users who are targeted receive an email with the subject line "Your BlackBerry ID has...

CVE-2012-4337

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

Cross site scripting

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

Spear Phishing Emails, Malware, Targeting BlackBerry Users

Blackberry owners are being targeted by a new type of malware that’s beginning to spread via spear phishing emails, according to security firm Websense. According to a post on the company’s blog, Security Labs, those users who are targeted receive an email with the subject line “Your BlackBerry I...

CVE-2012-4337

Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number during processing of cross references...

Bugzilla < 3.6.10 / 4.0.7 / 4.2.2 / 4.3.2 Multiple Information Disclosures

According to its banner, the version of Bugzilla installed on the remote host is affected by multiple information disclosure vulnerabilities : - In HTML bugmails, all bug IDs and attachment IDs are linkified, and hovering these links displays a tooltip with the bug summary or the attachment...

Safari Content-Disposition Handling Could Allow Cross-site Scripting

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple Safari software version 5.1.5 7534.55.3 for Windows and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affecte...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on April 7, 2014

Medium Alert ID: 26690 First Published: 2012 August 20 19:55 GMT Last Updated: 2014 April 8 13:28 GMT Version: 78 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a money transfer receipt for the recipient. The email message...

Unrestricted file upload

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message...

CVE-2012-4269

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message...

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2326

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2326

MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting

Fedora 16 : bugzilla-4.0.7-1.fc16 (2012-11324)

These versions of Bugzilla fix an information leak that allows an unprivileged user to read the description of a private attachment. See https://bugzilla.mozilla.org/showbug.cgi?id=777586 for all the details. Note that Tenable Network Security has extracted the preceding description block directl...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID 58253655-d82c-11e1-907c-20cf30e32f6d OpenVAS Vulnerability Test $ Description: Auto generated from VID 58253655-d82c-11e1-907c-20cf30e32f6d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...