Burden不正确身份验证漏洞

CVE ID：CVE-2013-7137 Burden是用PHP编写的一个全功能的任务管理应用程序。 该漏洞存在由于处理“burdenuserrememberme”cookie参数时没有足够的验证，远程未经认证的用户可以设置“burdenuserrememberme”cookie为“1”，并获得对应用程序的管理权限。 0 Burden=1.8 厂商补丁： Burden ----- Burden 1.8.1版本以修复此漏洞，建议用户下载使用： https://github.com/joshf/Burden/releases/tag/1.8.1 The exploitation exampl...

Flash Player <= 11.7.700.252 / 11.9.900.152 Multiple Vulnerabilities (APSB13-28)

According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 11.7.700.252 / 11.8.x or 11.9.x equal or prior to 11.9.900.152. It is, therefore, potentially affected by the following vulnerabilities : - A type-confusion error exists that could all...

RHEL 5 / 6 : Adobe Reader (RHSA-2013:1402)

Updated acroread packages that disable the Adobe Reader web browser plug-in are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Adobe Reader 9 reached the end of its support cycle on June 26,...

IBM Lotus Sametime WebPlayer DoS

This module exploits a known flaw in the IBM Lotus Sametime WebPlayer version 8.5.2.1392 and prior to cause a denial of service condition against specific users. For this module to function the target user must be actively logged into the IBM Lotus Sametime server and have the Sametime Audio Visu...

Debian Security Advisory DSA 2768-1 (icedtea-web - heap-based buffer overflow)

A heap-based buffer overflow vulnerability was found in icedtea-web, a web browser plugin for running applets written in the Java programming language. If a user were tricked into opening a malicious website, an attacker could cause the plugin to crash or possibly execute arbitrary code as the us...

DSA-2768-1 icedtea-web - heap-based buffer overflow

Bulletin has no description...

[SECURITY] Fedora 19 Update: icedtea-web-1.4.1-0.fc19

The IcedTea-Web project provides a Java web browser plugin, an implementati on of Java Web Start originally based on the Netx project and a settings too l to manage deployment settings for the aforementioned plugin and Web Start implementations...

Malicious Pinterest browser plugin stealing passwords and spreading spam

Social networking sites are unfortunately now major interest to malicious cyber criminals, spreading malware and building botnet army to steal money direct from your keyboards. Janne Ahlberg, a security professional from Finland found and analysed an interesting piece of malicious code, offered a...

Malicious Pinterest browser plugin stealing passwords and spreading spam

Social networking sites are unfortunately now major interest to malicious cyber criminals, spreading malware and building botnet army to steal money direct from your keyboards. Janne Ahlberg, a security professional from Finland found and analysed an interesting piece of malicious code, offered a...

Flash Player for Mac <= 10.3.183.86 / 11.7.700.203 Memory Corruption (APSB13-16)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal or prior to 11.7.700.203, or 10.x equal or prior to 10.3.183.86. It is, therefore, potentially affected by a memory corruption vulnerability that could lead to code execution. C Tenable...

Flash Player <= 10.3.183.75 / 11.7.700.169 Multiple Vulnerabilities (APSB13-14)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal or prior to 11.7.700.169, or 10.x equal or prior to 10.3.183.75. It is, therefore, potentially affected by several memory corruption errors that could lead to code execution. %NASLMINLEVEL...

Fedora 18 : php-sabredav-Sabre_DAV-1.6.5-5.fc18 (2013-7289)

Fixes archives/files problem This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for...

Fedora 17 : php-sabredav-Sabre_DAV-1.6.5-5.fc17 (2013-7285)

Fixes archives/files problem This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for...

Fedora 19 : php-sabredav-Sabre_DAV-1.6.5-5.fc19 (2013-7253)

Fixes archives/files problem This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for sabredav. This update patches the problem in the browser plugin for...

Fedora Update for icedtea-web FEDORA-2013-5925

Check for the Version of icedtea-web OpenVAS Vulnerability Test Fedora Update for icedtea-web FEDORA-2013-5925 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Google Chrome Frame < 26.0.1410.28 Denial of Service

The version of Google Chrome Frame installed on the remote host is earlier than 26.0.1410.28. Such versions are affected by a vulnerability that could allow an attacker to trigger a browser crash by tricking a victim into opening a specially crafted HTML document. %NASLMINLEVEL 70300 C Tenable...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

Another Java zero-day vulnerability being exploited in the wild

Do you still have Java installed? There is a bad news for you ! FireEye has detected yet another Java zero-day vulnerability being exploited in attacks in the wild. The vulnerability targets browsers that have the latest version of the Java plugin installed Java v1.6 Update 41 and Java v1.7 Updat...

Two new Java zero-day vulnerabilities reported to Oracle

A Polish security firm 'Security Explorations' reported two new Java zero-day vulnerabilities, as "issue 54" and "issue 55," with proof of concept code to Oracle. Oracle's security team is currently investigating the issue, but the status flaws not yet confirmed by Oracle. Less than a week after...