ASUS RT-N13U Router Built-in Admin Telnet Account with Unchangeable Password

The remote host is running a telnet service with an unchangeable admin account with known credentials admin/admin. An attacker could log into this account and gain complete control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

PT-2013-1209

Name of the Vulnerable Software and Affected Versions Memcached versions 1.4.5 and earlier Memcached versions prior to 1.4.17 Description The issue involves multiple integer signedness errors in certain functions, including process bin sasl auth, process bin complete sasl auth, process bin update...

PT-2013-2086

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2003 SP3 and 2007 SP3 Description A remote code execution issue exists in the way that affected Microsoft Office software parses specially crafted WordPerfect document .wpd files. An attacker who successfully exploits...

PT-2013-4722

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 Office Compatibility Pack version SP3 Description A remote code execution issue exists in the way that affected Microsoft Word software parses specially crafted files. This could allow an attacker to take...

PT-2013-4720

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 Excel Viewer affected versions not specified Office Compatibility Pack version SP3 Description A remote code execution issue exists in the way Microsoft Excel parses content in Excel files. This could allow an...

MS13-081: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: October 8, 2013

Resolves vulnerabilities in Windows that could allow remote code execution if a user views shared content that embeds OpenType or TrueType font files. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system.INTRODUCTIONMicrosoft has released...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3879 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability

Title: ====== Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability Date: ===== 2013-09-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1080 VL-ID: ===== 1080 Common Vulnerability Scoring System: ==================================== 6....

Unrestricted file upload

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

The CVE-2013-5962 entry relates to the WordPress plugin Complete Gallery Manager (before 3.3.4 rev40279). Affected component: frames/upload-images.php which permits an unrestricted file upload. Root cause: uploading a file with an executable extension allows remote attackers to access the uploade...

PT-2013-5886

Name of the Vulnerable Software and Affected Versions Complete Gallery Manager plugin versions prior to 3.3.4 rev40279 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the /frames/upload-images.php endpoint, and then...

CVE-2013-5962: Undefined Security Weakness

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

WordPress Complete Gallery Manager 3.3.3 File Upload

Title: ====== Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability Date: ===== 2013-09-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1080 VL-ID: ===== 1080 Common Vulnerability Scoring System: ==================================== 6....

WordPress Complete Gallery Manager Plugin 3.3.3 - Arbitrary File Upload

Complete Gallery Manager is prone to an arbitrary file upload vulnerability that is located in the /plugins/complete-gallery-manager/frames/ path when processing to upload via the upload-images.php file own malicious context or webshells.The vulnerability allows the attackers to upload files via...

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. OpenEMR is ONC Complete Ambulatory EHR certified and is one of the most popular open source electronic medical records in use...

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities

OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities Exploit Title: OpenEMR 4.1.1 Patch 14 Multiple Vulnerabilities Date: Sep 17 2013 Exploit Author: xistence Vendor Homepage: www.open-emr.org Tested on: CentOS 5.9 32-bit Affected Version : 4.1.1 Patch 14 and lower Fix: Upgrade to OpenEMR 4.1.2...

WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload

Document Title: =============== WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1080 Release Date: ============= 2013-09-16 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Windows OLE Remote Code Execution Vulnerability (2876217)

This host is missing an critical security update according to Microsoft Bulletin MS13-070. OpenVAS Vulnerability Test $Id: secpodms13-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows OLE Remote Code Execution Vulnerability 2876217 Authors: Veerendra GG Copyright: Copyright c 2013 SecPod...

Watchguard Server Center - Local Privilege Escalation

// source: https://www.securityfocus.com/bid/62261/info Watchguard Server Center is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain SYSTEM privileges. Successful exploits will result in the complete compromise of affected computers. Watchguard...