Jetaudio 8.0.17 Crash Proof Of Concept

References: http://downloads.securityfocus.com/vulnerabilities/exploits/61400.py http://packetstormsecurity.com/files/122504/Jetaudio-8.0.17-Crash-Proof-Of-Concept.html http://cxsecurity.com/issue/WLB-2013070167 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

Fedora Update for kaccessible FEDORA-2013-13112

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for kaccessible FEDORA-2013-13499

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

PHP 5.3.x < 5.3.27 Heap Buffer Overflow Vulnerability (Jul 2013) - Windows

PHP is prone to a heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if...

xmonad XMonad.Hooks.DynamicLog Module - Multiple Remote Command Injection Vulnerabilities

source: https://www.securityfocus.com/bid/61491/info XMonad.Hooks.DynamicLog module for xmonad is prone to multiple remote command-injection vulnerabilities. Successful exploits will result in the execution of arbitrary commands in the context of the affected applications. This may aid in further...

Apache Struts 2.2.3 - Multiple Open Redirections

source: https://www.securityfocus.com/bid/61196/info Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can leverage these issues by constructing a crafted URI and enticing a user to follow it. Wh...

MS13-056: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187)

The remote Windows host is potentially affected by a vulnerability that could allow remote code execution if a user opens a malicious image file. Successful exploitation of this vulnerability could allow an attacker to gain the same user rights as the local user. C Tenable Network Security, Inc...

WordPress Plugin Category Grid View Gallery - ID Cross-Site Scripting

WordPress Plugin Category Grid View Gallery - ID Cross-Site Scripting source: https://www.securityfocus.com/bid/60905/info The Category Grid View Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker ma...

et-chat - Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability. An attacker can exploit these issues to gain elevated privileges within the application and upload arbitrary shells; this can result in an...

Fedora Update for kaccessible FEDORA-2013-10182

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 17 Update: kaccessible-4.10.4-1.fc17

Provides accessibility services like focus tracking and a screen reader...

ZamFoo - 'date' Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may also be affected...

ZamFoo - date Remote Command Injection

ZamFoo - date Remote Command Injection source: https://www.securityfocus.com/bid/60826/info ZamFoo is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. ZamFoo 12.0 is vulnerable; other versions may...

Fedora Update for kaccessible FEDORA-2013-10130

Check for the Version of kaccessible OpenVAS Vulnerability Test Fedora Update for kaccessible FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 18 Update: kaccessible-4.10.4-1.fc18

Provides accessibility services like focus tracking and a screen reader...

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion source: https://www.securityfocus.com/bid/60449/info HP Insight Diagnostics is prone to a local file include vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain...

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion

source: https://www.securityfocus.com/bid/60449/info HP Insight Diagnostics is prone to a local file include vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary loca...

[SECURITY] Fedora 19 Update: kaccessible-4.10.4-1.fc19

Provides accessibility services like focus tracking and a screen reader...

Caucho Resin - 'index.php?logout' Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info Resin Professional is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...