CVE-2013-0631

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013...

CVE-2013-0631

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2013-0629

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2012-6272

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38179...

CVE-2012-6429

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38206...

CVE-2012-6430

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38207...

CVE-2012-5190

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38204 2020-01-21 18:44:14+00:00| seen| https://t.me/cibsecurity/9314...

Adobe Patches Acrobat, Reader and Flash Flaws

Adobe has not only joined Microsoft on the Patch Tuesday parade, but it too has critical vulnerabilities being exploited in the wild while a security update is in the works. Two patches were released today for Acrobat/Reader and Flash Player, yet the company has said that fixes for three ColdFusi...

Unrestricted file upload

Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012...

CVE-2012-6498

Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012...

CVE-2013-0757

creationtimestamp| type| source ---|---|--- 2013-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41683 2014-12-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41684 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-0161

creationtimestamp| type| source ---|---|--- 2013-01-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38169...

CVE-2012-6081

Removed by vendor...

CVE-2012-4366

creationtimestamp| type| source ---|---|--- 2013-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38164...

Code injection

Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...

Microsoft Internet Explorer Remote Code Execution Vulnerability (2794220)

This host is missing a critical security update according to Microsoft Bulletin MS13-008. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS KB2794220: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)

The remote host is missing the workaround referenced in KB 2794220 Microsoft 'Fix it' 50971. This workaround mitigates a use-after-free vulnerability in Internet Explorer. Without this workaround enabled, an attacker could exploit this vulnerability by tricking a user into viewing a maliciously...

Microsoft Internet Explorer CButton Object Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Microsoft Interne...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly allocated or 2 is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild...

CVE-2012-4792

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly allocated or 2 is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild...