IOS HTTP Authorization Vulnerability - Cisco Systems

When the HTTP server is enabled and local authorization is used, it is possible, under some circumstances, to bypass the authentication and execute any command on the device. In that case, the user will be able to exercise complete control over the device. All commands will be executed with the...

SMA-DB 0.3.14 (pfad_z) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= SMA-DB 0.3.14 pfadz Local File Inclusion Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Internet Explorer Access ActiveX Controls Remote Code Execution (MS10-044; CVE-2010-0814)

A remote code execution vulnerability exists in Access ActiveX controls due to the way that multiple ActiveX controls are loaded by Internet Explorer. The vulnerability is due to the way that Internet Explorer handles memory allocation when instantiating a succession of Access ActiveX controls. T...

Apple Safari for Windows and Internet Explorer Combined Code Execution (CVE-2008-2540)

Microsoft Internet Explorer is the most widely used Internet browser. Safari is a web browsing application developed by Apple. A combination of the default download location in Safari and how the Windows desktop handles executables creates a blended threat in which files may be downloaded to a...

Oracle Solaris - rdist Privilege Escalation

Oracle Solaris - rdist Privilege Escalation source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue wi...

Adobe Plugs Critical Photoshop Security Holes

Adobe has issued a security patch for its Adobe Photoshop CS4 software to plug “critical” vulnerabilities that expose users to code execution attacks with rigged image files. The flaws affect both Windows and Mac OS X users. Adobe Photoshop CS5 is not affected by these issues. The company only...

CVE-2010-1548

The CVE concerns the Chaos Tool Suite (CTools) Drupal module (6.x) prior to 6.x-1.4. The autocomplete functionality does not enforce access restrictions, allowing remote authenticated users with the 'access content' privilege to read the title of unpublished nodes via a query like q=ctools/autoco...

Update Protection against Microsoft SMB Client Transaction Memory Corruption Vulnerability (MS10-020)

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote attacker may exploit this vulnerability to take complete control ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...

CVE-2010-1111

Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...

CVE-2010-1111

The CVE-2010-1111 entry concerns multiple XSS vulnerabilities in the Jokes Complete Website. The affected components are the web pages joke.php (parameter: id) and results.php (parameter: searchingred). The underlying issue is cross-site scripting that could allow remote attackers to inject arbit...

CVE-2010-1111: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...

Zeus/Zbot Banking Trojan/Data Theft (credentialed check)

The remote Windows host has files that indicate that the Zeus also known as Zbot banking trojan has been installed, or that stolen data collected by this trojan remains on the system. The Zeus trojan will intercept and log activity related to online banking, as well as other logins, such as web,...

Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)

An elevation of privilege vulnerability exists in the Windows Kernel due to the way the kernel handles certain exceptions. The Windows Kernel is the core of the operating system. It provides system level services such as device management and memory management, allocates processor time to...

Update Protection against Microsoft Windows ICMPv6 Router Advertisement Vulnerability (MS10-009)

A remote code execution vulnerability exists in the Windows TCP/IP stack due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. An anonymous attacker could exploit the vulnerability by sending specially crafted ICMPv6 Router Advertisement packet...

PostgreSQL Server Generic Query

This module will allow for simple SQL statements to be executed against a PostgreSQL instance given the appropriate credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PostgreSQL Serve...

Battery Life Toolkit 1.0.9 - bltk_sudo Local Privilege Escalation

Battery Life Toolkit 1.0.9 - bltksudo Local Privilege Escalation source: https://www.securityfocus.com/bid/37996/info Battery Life Toolkit BLTK is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges,...

Battery Life Toolkit 1.0.9 - 'bltk_sudo' Local Privilege Escalation

source: https://www.securityfocus.com/bid/37996/info Battery Life Toolkit BLTK is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer. This...

Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

Jokes Complete Website Cross Site Scripting

======================================================================================== | Title : Jokes Complete Website Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site :...