Chrome for Android - UXSS via com.android.browser.application_id Intent extra

CVE Number: CVE-2012-4905 Title: Chrome for Android - UXSS via com.android.browser.applicationid Intent extra Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: By sending a...

MyBB ChangUonDyu Extra File Chatbox Persistent XSS Vulnerability

Popular inferno-like chatbox built for MyBB! ChangUonDyu Extra File Chatbox Persistent XSS Location: Chatbox Notice Vendor: http://community.mybb.com/thread-63559.html PoC: function buildnotice global $fcbfile,$smilies; $noticef = filegetcontents$fcbfile'notice'; $handle =...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

CVE-2012-5542

The vulnerability CVE-2012-5542 affects the Drupal Commerce Extra Panes module (7.x-1.x) prior to 7.x-1.1. The issue is a CSRF flaw that could allow an attacker to trick an administrator into enabling/disabling a Commerce extra panes pane via certain administrative actions (e.g., related to the l...

Fedora 17 : claws-mail-3.9.0-1.fc17 / claws-mail-plugins-3.9.0-2.fc17 (2012-18558)

Added IMAP server side search - Added the file .claws-mail/extraheaderrc which holds editable extra headers to be added to compose window combobox - Added 'Select html part of multipart messages' to the Folder Properties - GnuPG: Consider marginal signature validity as untrusted - The mimeview...

FL Studio 10 Producer Edition - Buffer Overflow (SEH) (PoC)

Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be Vulnerable. Tested On : Windows 7...

CVE-2012-5004

Multiple cross-site request forgery CSRF vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that 1 add group plans via admin/groupplans.html or 2 add extra packages via admin/extrapacks/createextrapack.html...

Google Updates Chrome for Android, Fixes Several Vulnerabilities

Google has issued a security update for its Chrome operating system on Android devices, resolving seven medium-risk vulnerabilities and paying out a total of $3,500 in rewards to two researchers. On the Google Chrome Blog, software engineer Jay Civelli wrote that the update strengthens Chrome for...

CVE-2012-2792

Unspecified vulnerability in the decodeinit function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame...

WordPress Cimy User Extra Fields 2.3.7 Shell Upload

Exploit Title: wordpress plugin Cimy User Extra Fields Arbitrary File Upload Vulnerability Google Dork: inurl:"inurl:/wp-content/CimyUserExtraFields" Date: 07/18/2012 Author: Crim3R plugin download Link : http://downloads.wordpress.org/plugin/cimy-user-extra-fields.2.3.7.zip Version: 2.3.7 Tested...

CVE-2012-2720

The Token Authentication tokenauth module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges...

Authentication flaw

The Token Authentication tokenauth module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges...

CVE-2012-2720

The Token Authentication tokenauth module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges...

Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability Version : 1.7 Link : http://wordpress.org/extend/plugins/comment-extra-field/ Plugins : http://downloads.wordpress.org/plugin/comment-extra-field.1.7.zip Date :...

WordPress Comment Extra Fields Shell Upload

Description : Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability Version : 1.7 Link : http://wordpress.org/extend/plugins/comment-extra-field/ Plugins : http://downloads.wordpress.org/plugin/comment-extra-field.1.7.zip Date : 30-05-2012 Google Dork :...

CVE-2012-2120

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

DEBIAN-CVE-2012-2120

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

Design/Logic Flaw

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2012-2120

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

UBUNTU-CVE-2012-2120

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...