Video Charge Studio <= 2.9.5.643 (.vsc) Buffer Overflow (SEH)

No description provided by source. !/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...

Pheap 1.x/2.0 Edit.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22670/info Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files...

JPEGsnoop <= 1.5.2 WriteAV Crash PoC

No description provided by source. !/usr/bin/perl JPEGsnoop 1.5.2 = WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://sourceforge.net/projects/jpegsnoop/ Vendor Description: JPEGsnoop is a detailed JPEG image decoder and analysis tool. It reports al...

phpmps储存型xss一枚

简要描述： rt 详细说明： Phpmps 是基于PHP + MYSQL的开源分类信息发布系统 注册用户后，发布信息。 post.php $catid = $POST'catid' ? intval$POST'catid' : ''; $title = $POST'title' ? htmlspecialcharstrim$POST'title' : ''; $areaid = $POST'areaid' ? intval$POST'areaid' : ''; $postdate = time; $enddate = $POST'enddate'0 ?...

openSUSE Security Update : chromium (openSUSE-SU-2013:1729-1)

Chromium was updated to 30.0.1599.114 : Stable Channel update: fix build for 32bit systems - Update to Chromium 30.0.1599.101 - Security Fixes : + CVE-2013-2925: Use after free in XHR + CVE-2013-2926: Use after free in editing + CVE-2013-2927: Use after free in forms. + CVE-2013-2928: Various fix...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0008-1)

This update fixes the following security issues with SeaMonkey : - update to SeaMonkey 2.23 bnc854370 - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger...

openSUSE Security Update : chromium (openSUSE-SU-2014:0065-1)

Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...

[SECURITY] Fedora 20 Update: mingw-readline-6.2-4.fc20

The Readline library provides a set of functions that allow users to edit command lines. Both Emacs and vi editing modes are available. The Readline library includes additional functions for maintaining a list of previously-entered command lines for recalling or editing those lines, and for...

[SECURITY] Fedora 19 Update: mingw-readline-6.2-4.fc19

The Readline library provides a set of functions that allow users to edit command lines. Both Emacs and vi editing modes are available. The Readline library includes additional functions for maintaining a list of previously-entered command lines for recalling or editing those lines, and for...

[SECURITY] [DSA 2930-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2930-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 17, 2014 http://www.debian.org/security/faq -...

Updated chromium-browser-stable packages fix multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation CVE-2014-1740. John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model implementation...

CVE-2013-4429: Undefined Security Weakness

Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the 1 artefact id in an upload action when creating a journal or 2 instconfartefactidselectedID parameter in an...

Debian DSA-2930-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. - CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model...

DSA-2930-1 chromium-browser - security update

Bulletin has no description...

Debian Security Advisory DSA 2930-1 (chromium-browser - security update)

Several vulnerabilties have been discovered in the chromium web browser. CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model...

SA-CONTRIB-2014-053 - Field API Tab Editor (FATE) - Access bypass

This module allows each entity field to be individually edited via its own custom page, accessible via a tab on the entity's page. The module returns an incorrect value to hookmenu if the current user does not have access to edit the entity. This allows users who would not normally have access to...

[SECURITY] Fedora 20 Update: owncloud-6.0.3-1.fc20

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 3 security fixes in this release: 358038 High CVE-2014-1740: Use-after-free in WebSockets. Credit to Collin Payne. 349898 High CVE-2014-1741: Integer overflow in DOM ranges. Credit to John Butler. 356690 High CVE-2014-1742: Use-after-free in editing. Credit to...

PT-2017-10725

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0 through 4.6 Description The issue concerns a Denial of Service DOS weakness in the table editing functionality. Recommendations For phpMyAdmin versions 4.0 through 4.6, at the moment, there is no information about a new...

Command injection

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMANDPATTERN and TESTRUNNER in the pageContent parameter when editing a page...