230 matches found
View Content Permission Set not Complete.
The Content Permission Set returned from the method getViewContentPermissions is incomplete. It appears to only contain a single ContentPermission object regardless of how many View permisisons have been attached to a Page. 1 Create a new page 2 Assign a View restriction for 1 group 3 Assign View...
PEStudio 3.69 Denial Of Service
Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Windows 7 Vendor Patch : Recently release...
Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow (CVE-2013-0003)
A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...
Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)
A buffer overflow vulnerability exists in Microsoft .NET Framework Windows Form. The vulnerability is due to a race condition when handling the size of an array of objects prior to copying them into a global memory buffer.An attacker can remotely exploit this vulnerability by enticing a user to...
Microsoft .NET Framework WinForms Information Disclosure (CVE-2013-0001)
A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way WinForms handles pointers to unmanaged memory locations.A remote, unauthenticated attacker can exploit this vulnerability by either enticing a user to visit a maliciously...
Microsoft .NET Framework Privilege Elevation Vulnerability (2800277)
This host is missing an important security update according to Microsoft Bulletin MS13-015. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)
This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...
Microsoft .NET Framework CVE-2013-0001 Information Disclosure Vulnerability
Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to bypass certain Code Access Security CAS restrictions and obtain sensitive information from the target system that may aid in further attacks. Technologies Affect...
CVE-2012-1896
Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka "Code Access Securi...
SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability
OVERVIEW SilverStripe 2.4.7 and lower versions are vulnerable to Persistent Cross Site Scripting. 2. BACKGROUND SilverStripe CMS is easy for both developers and content authors to work with. The SilverStripe Framework keeps the code tucked away neatly so that it can be accessed easily by...
GLSA-201206-13 : Mono: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201206-13 Mono: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mono and Mono debugger. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary...
PT-2011-4432 · Microsoft · Windows Media Center +5
Name of the Vulnerable Software and Affected Versions: Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 Description: A remote code execution issue exists in the way Windows Media Player and Windows Media Center handle .dvr-ms files...
DivX Plus Web Player 2.1.2.265 Buffer Overflow
Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC 0day Date: 10/4/2011 Author: Snake Shahriyar.j gmail Version: DivX Plus Web Player dd esp 049ff35c 045e56d4 00000000 03d6c8e3 049ffbfc 049ff36c 045e56d0 04634f9e 001f5980 00000000 049ff37c 001eb9e0 00000000 001c5258...
CVE-2011-3694
The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL...
Microsoft .NET Framework Information Disclosure Vulnerability (2567951)
This host is missing an important security update according to Microsoft Bulletin MS11-069. OpenVAS Vulnerability Test $Id: secpodms11-069.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Information Disclosure Vulnerability 2567951 Authors: Sooraj KS Copyright: Copyright c 2011...
MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
The JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly validates certain values within an object. An attacker may be able to leverage this vulnerability to run arbitrary code as the logged in user or the user account of ASP.NET on the affected...
MS11-028: Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015)
The x86 JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly compiles certain types of function calls. An attacker may be able to leverage this vulnerability to run arbitrary code on the affected system under either of the following scenarios : -...
CVE-2010-4225
Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...
ProFTPD 1.3.3c Compromised Source Remote Trojan
The ProFTPD server is a full featured File Transfer Protocol FTP server mainly used in Linux distributions. Aside from the standard FTP features, the server supports a number of extensions. ProFTPD 1.3.3c backdoor allows users remote code access to systems which run the modified version of the...
CVE-2010-3180
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window...