Microsoft Excel File Format Code Execution (MS12-030) - Ver2 (CVE-2012-0141)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...

Microsoft .NET Framework CVE-2015-1672 Remote Denial of Service Vulnerability

Description Microsoft .NET Framework is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to degrade the performance of a .NET-enabled website, causing a denial-of-service condition. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilo...

Threat Outbreak Alert RuleID14530: Email Messages Distributing Malicious Software on April 9, 2015

Medium Alert ID: 38310 First Published: 2015 April 9 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14530 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13978: Email Messages Distributing Malicious Software on March 17, 2015

Medium Alert ID: 37858 First Published: 2015 March 13 14:51 GMT Last Updated: 2015 March 18 16:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13978 and...

Threat Outbreak Alert RuleID13134: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 37030 First Published: 2015 January 16 17:07 GMT Last Updated: 2015 July 7 13:09 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13134 and...

CVE-2011-5287: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 hesksettingstmptitle or 2 hesklangENCODING parameter to inc/header.inc.php; the hesklangattempt parameter to 3 inc/assignmentsearch.inc.php, 4...

PHP-Calendar 0.10.1 - Arbitrary File Inclusion

PHP-Calendar 0.10.1 - Arbitrary File Inclusion PHP-Calendar Arbitrary File Inclusion Vendor: Sean Proctor Product: PHP-Calendar Version: = 0.10.1 Website: http://php-calendar.sourceforge.net/ BID: 12127 CVE: CVE-2004-1423 OSVDB: 12700 12701 SECUNIA: 22516 PACKETSTORM: 35563 Description: I was...

Threat Outbreak Alert RuleID11094: Email Messages Distributing Malicious Software on August 13, 2014

Medium Alert ID: 35282 First Published: 2014 August 13 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11094 may contain the following files: Name |...

CVE-2014-3549

Cross-site scripting XSS vulnerability in the getdescription function in lib/classes/event/userloginfailed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attem...

Cross site scripting

Cross-site scripting XSS vulnerability in the getdescription function in lib/classes/event/userloginfailed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attem...

CVE-2014-3549

Cross-site scripting XSS vulnerability in the getdescription function in lib/classes/event/userloginfailed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attem...

PT-2014-5387

Name of the Vulnerable Software and Affected Versions Moodle versions 2.7.x through 2.7.0 Description A cross-site scripting issue exists due to improper handling of a crafted username during the logging of an invalid login attempt. This occurs in the get description function in...

kr-web <= 1.1b2 - Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg KR-Web = 1.1b2 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/krw/files/ Dork : dieHacking attempt; :D Vuln : ./KR-Web-1.1b2/adm/krgourl.php line 2 ?php include...

PNphpBB2 <= 1.2g - (phpbb_root_path) Remote File Include Vulnerability

No description provided by source. Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

sFileManager <= v.24a Local File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= sFileManager = v.24a / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: sFileManager $ Version: = v.24a $ File affected: fm.php $ Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML via an invalid TELNET connection attempt with a crafted username that is not properly handled during...

IE 11 Stands Up to Pwn2Own Exploit Attempt

VANCOUVER – Successful exploits at the Pwn2Own contest get all the glitz, but the rarities are the exploits that fail. A group of four young South Korean hackers from ASRT, all of them well shy of their thirtieth birthdays, stood in proxy for Jung Hoon Lee. Lee was home fulfilling a military...

Threat Outbreak Alert: Email Messages with Links to Malicious Files on March 6, 2014

Medium Alert ID: 33240 First Published: 2014 March 8 02:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a contract for the recipient. The email message attempts to persuade the recipient to open the...

Ecmall 2.x 多处安全漏洞汇总

简要描述： 一处通杀注入，同文件多处鸡肋注入，一处本地包含。累了不看了，体力活。。。 详细说明： 通杀注入:http://localhost/ecmall/index.php?app=mygoods&act=brandlist&order=asc&sort=1 and select username from ecmmember where userid=1 union select 1 from select count,concatfloorrand02,select concatusername,password from ecmmember limit 0,1a from...

Threat Outbreak Alert: Fake Payment Transfer Notification Email Messages on February 26, 2014

Medium Alert ID: 33056 First Published: 2014 February 26 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notification for the recipient. The text in the email message attempts to convince the...