CVE-2013-2921

Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering...

CVE-2013-4142

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3969. Reason: This candidate is a duplicate of CVE-2013-3969. Notes: All CVE users should reference CVE-2013-3969 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Shylock/Caphaw Banking Malware Infections on the Rise

Two dozen major U.S. and European banks are in the crosshairs of the Shylock, or Caphaw, financial malware of late, and victims who trade with one of the 24 financial institutions are at risk of giving up their credentials and losing assets in their accounts. Malware researchers have noticed a ri...

CVE-2013-3115

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...

CVE-2013-3161

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...

CVE-2012-5382

creationtimestamp| type| source ---|---|--- 2013-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28130...

CVE-2013-6127

creationtimestamp| type| source ---|---|--- 2013-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28084...

Fedora 18 : 389-ds-base-1.3.0.8-1.fc18 (2013-15518)

In this version, a security bug -- modifying an entry specified by an invalid DN crashed the server -- was fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System AMDS before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and...

http-default-accounts NSE Script

Tests for access with default credentials used by a variety of web applications and devices. It works similar to http-enum, we detect applications by matching known paths and launching a login routine using default credentials when found. This script depends on a fingerprint file containing the...

CVE-2013-5311

creationtimestamp| type| source ---|---|--- 2013-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27519...

CVE-2013-4996

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted database name, 2 a crafted user name, 3 a crafted logo URL in the navigation panel, 4 a...

CVE-2013-2577

creationtimestamp| type| source ---|---|--- 2013-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27049...

Corel PDF Fusion Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' class Metasploit3 'Corel PDF Fusion...

Solaris Recommended Patch Cluster 619 (x86) - Local Privilege Escalation

Solaris Recommended Patch Cluster 619 x86 - Local Privilege Escalation Solaris Recommended Patch Cluster 6/19 local root on x86 Larry W. Cashdollar 7/3/2013 @larry0 If the system administrator is updating the system using update manager or smpatch multi user mode a local user could execute...

CVE-2013-4610

CVE-2013-4610 affects the Data Search utility in REDCap data-entry forms, specifically REDCap before 5.0.3 and 5.1.x before 5.1.2. The impact is not specified in the sources, and there are no public exploitation details provided in the connected documents. No remediation or fix versions are descr...

import_results

This plugin serves as an entry point for the results of other tools that identify URLs. The plugin reads from different input files and directories and creates the fuzzable requests which are needed by the audit plugins. Two configurable parameter exist: inputcsv inputburp One or more of these ne...

CVE-2013-2572

creationtimestamp| type| source ---|---|--- 2013-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25812...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2546, CVE-2013-2547, CVE-2013-2548. Reason: This candidate is a duplicate of CVE-2013-2546, CVE-2013-2547, and CVE-2013-2548. Notes: All CVE users should reference one or more of CVE-2013-2546, CVE-2013-2547, and CVE-2013-254...

CVE-2013-1794

Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long fileserver ACL entry...