366 matches found
wenschow.de XSS vulnerability
Vulnerable URL: http://www.wenschow.de/index.asp?sessionid='"--!confirmOPENBUGBOUNTY...
Local Privilege Escalation in GlobalProtect Agent for OS X
A vulnerability was recently identified which allows a local user to escalate privileges through the GlobalProtect Agent for OS X Ref 97042...
PT-2015-2854 · Adobe +3 · Integrated Runtime +4
Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...
Internet Bug Bounty: Use After Free in Flash MessageChannel.send can cause arbitrary code execution
Sending messages between workers while having the animation reloaded can cause an object to be freed while a reference remains in memory. An attacker can use this issue to control eip and potentially execute arbitrary code. Identified as CVE-2015-0320, and reported to Adobe via Chrome VRP:...
RedaxScript 2.1.0 - Privilege Escalation Vulnerability
Exploit for php platform in category web applications Exploit Title: Privilege Escalation in RedaxScript 2.1.0 Date: 11-05-2014 Exploit Author: shyamkumar somana Vendor Homepage: http://redaxscript.com/ Version: 2.1.0 Tested on: Windows 8 Privilege Escalation in RedaxScript 2.1.0 RedaxScript 2.1....
DEBIAN-CVE-2012-5671
Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...
WordPress Download Manager 2.2.2 Cross Site Scripting
Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...
CVE-2011-4336
creationtimestamp| type| source ---|---|--- 2011-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35974 2020-01-15 16:39:25+00:00| seen| https://t.me/cibsecurity/9207 2020-01-21 18:44:16+00:00| seen| https://t.me/cibsecurity/9316...
ZyWALL USG Appliance Access Bypass
Advisory: Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface The ZyXEL ZyWALL USG appliances perform parts of the authorization for their management web interface on the client side using JavaScript. By setting the JavaScript variable "isAdmin" to "true", a user with limited acce...
Simploo CMS 1.7.1 PHP Code Execution
Exploit for php platform in category web applications Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits...
HP-UX Update for X Font Server (xfs) Software HPSBUX02303
Check for the Version of X Font Server xfs Software OpenVAS Vulnerability Test HP-UX Update for X Font Server xfs Software HPSBUX02303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...
HP-UX Update for Apache HPSBUX01064
Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX01064 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
HP-UX Update for Trusted Mode remshd HPSBUX02072
Check for the Version of Trusted Mode remshd OpenVAS Vulnerability Test HP-UX Update for Trusted Mode remshd HPSBUX02072 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...
Debian Security Advisory DSA 1728-1 (dkim-milter)
The remote host is missing an update to dkim-milter announced via advisory DSA 1728-1. OpenVAS Vulnerability Test $Id: deb17281.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1728-1 dkim-milter Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
[SECURITY] Fedora 9 Update: dkim-milter-2.8.1-1.fc9
The dkim-milter package is an open source implementation of the DKIM sender authentication system proposed by the E-mail Signing Technology Group ESTG, now a proposed standard of the IETF RFC4871. DKIM is an amalgamation of the DomainKeys DK proposal by Yahoo!, Inc. and the Internet Identified Ma...
Debian DSA-1728-1 : dkim-milter - improper assertion
It was discovered that dkim-milter, an implementation of the DomainKeys Identified Mail protocol, may crash during DKIM verification if it encounters a specially crafted or revoked public key record in DNS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...