862 matches found
UBUNTU-CVE-2014-2889
Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...
CVE-2014-2889
Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...
Ecmall某处存储型xss 2（有条件）
简要描述： 我怕你们又有特定的渠道知道漏洞了，所以自评为低。 详细说明： 这里仅仅测试一下xss的点在哪里，至于漏洞利用，这个点和之前那个xss1是一样的也可以getshell。 1.鸡肋的地方在于后台必须开启团购功能： 2.发布团购商品，还是按照老办法来fuzz一下： 3.查看该商品页面发现某处又过滤不严，存在xss漏洞 4.老方法拿shell 漏洞证明： 略...
CVE-2013-2244
Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...
CVE-2013-2244
Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...
CVE-2013-2244
Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...
CVE-2013-2244
Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...
CVE-2013-2244: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...
Updated moodle package fixes multiple security vulnerabilities
Flash files distributed with the YUI library in Moodle before 2.4.5 may have allowed for cross-site scripting attacks MSA-13-0025. Privacy settings for the IMS-LTI External tool module in Moodle before 2.4.5 were not able to be changed so personal information was always transferred MSA-13-0026...
PT-2013-3619
Name of the Vulnerable Software and Affected Versions Moodle versions 2.4.x through 2.4.4 Moodle versions 2.5.x through 2.5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field. This is due to multiple...
Fedora Update for drupal7-rules FEDORA-2013-4532
Check for the Version of drupal7-rules OpenVAS Vulnerability Test Fedora Update for drupal7-rules FEDORA-2013-4532 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
eGlibc - Signedness Code Execution
Exploit Title: eGlibc Signedness Vulnerability Date: November 2011 Exploit Author: c0ntex Vendor Homepage: http://www.eglibc.org Software Link: http://www.eglibc.org/home Version: eGlibc supplied by Ubuntu 10.4 LTS Tested on: Ubuntu 10.4 LTS CVE : CVE-2011-2702 A delicious, yet slightly cold...
Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...
CVE-2011-1989
Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...
Design/Logic Flaw
Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...
CVE-2011-1989: Improper Input Validation
Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...
phpMyAdmin 3.x Conditional Session Manipulation
phpMyAdmin 3.x Conditional Session Manipulation Advisory from ???????????????????????????????????????????????.??? ??':????:'?????????????????????????????????????????::?????'??'.? ????'.??.'?????????????????????????????????????????????????????? ?????'..'???????..???..?????????:':??????????...
kernel: av7110 negative array offset
The dvbcaioctl function in drivers/media/dvb/ttpci/av7110ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a negative value...
Linux/x86 - exit(0) / exit(1) Shellcode (3/4 bytes)
Linux/x86 - exit0 / exit1 Shellcode 3/4 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x40" // inc %eax // "\x43" // inc %ebx "\xcd\x80"; // int $0x80 int main printf "\n+ Yet conditional %eax==0 Linux/x86 exit0 3 bytes or exit1 4 bytes" "\n+ Date: 18/06/2009" "\n+...
Fedora Update for mecab FEDORA-2007-0366
Check for the Version of mecab OpenVAS Vulnerability Test Fedora Update for mecab FEDORA-2007-0366 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...