Design/Logic Flaw

Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors...

CVE-2012-2688

CVE-2012-2688 affects PHP: Unspecified vulnerability in the _php_stream_scandir function of the stream implementation, reported for PHP before 5.3.15 and 5.4.x before 5.4.5. The issue is tied to an overflow in scandir, enabling remote attack vectors. Patched in PHP 5.3.15+ and 5.4.5+. No exploita...

CVE-2012-0801

lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors...

CVE-2012-0801

CVE-2012-0801 affects Moodle’s lib/formslib.php. Vulnerable in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 due to improper handling of multiple form element instances. Impact is unspecified in the provided sources. Remediate by upgrading Moodle to 2.1.4 or later, or 2.2.1 or later. Exploit d...

CVE-2011-4293

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets CSS and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified...

Design/Logic Flaw

Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-2012-2446 and CVE-2012-2447...

CVE-2012-3802

Unspecified vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors...

CVE-2012-3802

Unspecified vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

CVE-2012-2821

CVE-2012-2821 affects Google Chrome/Chromium’s autofill display prior to version 20.0.1132.43. The underlying issue is in the autofill implementation where text is not properly displayed, with unspecified impact beyond the CVSS-derived metrics. Connected documents corroborate its inclusion in Chr...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing...

CVE-2012-3559

Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."...

looter (поиск новых векторов атаки)

Небольшой скрипт,реализующий некоторые техники в сборе инфы и поиске новых векторов атаки: 1 non recurse tld request loot 2 soa email/domain loot 3 whois email/domain loot вводная Иногда бывают ситуации,когда требуется найти новые 'точки входа'. looter может помочь облегчить задачу - например,мож...

CVE-2012-3290

Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack vectors...

Msi.com Cross Site Scripting

Exploit Title: Msi.com XSS Vulnerability Date: 2/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Exploit/p0c : http://localhost:80/path/path//?sk=xss Proof of Concept: 1.1 he issue...

Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)

The version of Symantec LiveUpdate Administrator LUA installed on the remote host has a privilege escalation vulnerability. The installation directory allows write access to the Everyone group. This directory contains batch files that are periodically executed as SYSTEM. A local, unprivileged...

CVE-2011-3087

Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...

CVE-2011-3087

Chromium/Chrome impacted by CVE-2011-3087 (Incorrect window navigation). The connected OpenSUSE advisory shows the fix being applied via chromium updates to 21.0.1145, addressing the issue among other CVEs listed (e.g., 2011-3083 to 2011-3102). The root cause is reported as an incorrect window na...