CVE-2012-0366

Cisco Unity Connection (Linux-based platform) prior to versions 7.1.3b(Su2) and 7.1.5 is affected by CVE-2012-0366, a privilege-escalation vulnerability where an authenticated user with the Help Desk Administrator role can change the administrative password, gaining full control. The issue stems ...

Oracle Live Help On Demand Webcare Cross Site Scripting

Exploit Title: Oracle Live Help On Demand Webcare Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: http://www.oracle.com/index.html Google Dorks:inurl:UI/gui.php Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

CVE-2012-1047

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...

MS12-006: Description of the security update for Webio, Winhttp, and schannel in Windows: January 10, 2012

None None...

Changing from a single-user to a multi-user installation on Windows (rev2) – Opera Security Advisories

Changing from a single-user to a multi-user installation on Windows rev2 – Opera Security Advisories OPCOM Team | January 5, 2012 If you received the error message “There was a problem initializing Opera Mail. Engine Init Failed”, it may mean that you have a stand-alone USB installation of Opera...

mPDF <= 5.3 file disclosure and fix-vulnerability warning-the black bar safety net

Title: mPDF = 5.3 File Disclosure Author: ZadYree Download address: http://www.mpdf1.com/mpdf/download Affected versions: 5.3 and prior Test platform: multiple !/ usr/bin/perl-U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2 SYNOPSIS -- examples/showcode.php --...

Support Incident Tracker multiple vulnerabilities

Overview Support Incident Tracker or SiT! version 3.65, and possibly earlier versions, contain multiple vulnerabilities including; malicious file uploads, SQL injection, cross-site scripting, and cross-site request forgery. Description According to the SiT! website:"Support Incident Tracker or Si...

Linux Kernel 2.6.17 x86|i386 Local root Exploit

Exploit for linux platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0...

Industry Star of self-help built Station system v0. 8 7 vulnerability and fix-vulnerability warning-the black bar safety net

//templateedit.php function loadlibrary$currtemplate, $libname $libname = strreplace"0xa", ", $libname; // filter 0xa illegal characters if$libname == 'style' $libfile = '../templates/userthemes/' . $currtemplate . '/'.$ libname.'. css'; else $libfile = '../templates/userthemes/' . $currtemplate...

CVE-2010-4970

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4970

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4970

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4970

CVE-2010-4970 affects Wiki Web Help 0.28, where the vulnerability is an SQL injection in handlers/getpage.php via the id parameter. The underlying issue is insufficient sanitization of user-supplied data, allowing remote attackers to execute arbitrary SQL commands. Public references in the connec...

CVE-2011-2323

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

Code injection

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

CVE-2011-2323

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

CVE-2011-2308

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2011-2309

Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help...