Debian Security Advisory DSA 2661-1 (xorg-server - information disclosure)

David Airlie and Peter Hutterer of Red Hat discovered that xorg-server, the X.Org X server was vulnerable to an information disclosure flaw related to input handling and devices hotplug. When an X server is running but not on front for example because of a VT switch, a newly plugged input device...

DSA-2661-1 xorg-server - information disclosure

Bulletin has no description...

Debian: Security Advisory (DSA-2661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MoinMoin Multiple Vulnerabilities

MoinMoin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin"; ifdescription...

Spree promotions_controller.rb calculator_type Parameter Arbitrary Ruby Object Instantiation Command Execution

Spree contains a flaw that is triggered when handling input passed via the 'calculatortype' parameter to promotionscontroller.rb. This may allow a remote authenticated attacker to instantiate arbitrary Ruby objects and potentially execute arbitrary commands...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...

CVE-2012-5122

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2012-5122

Removed by vendor...

CVE-2012-5122

Technical details for CVE-2012-5122 are not publicly available in the provided documents. Monitor for updates from primary advisories; current sources list the CVE among Chrome/Chromium vulnerabilities but do not specify affected versions, vectors, or fixes in this bundle.

RedHat Update for xorg-x11-server RHSA-2012:0939-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Total Video Player 1.31 .m3u Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested...

Total Video Player 1.31 - .m3u Crash (PoC)

Total Video Player 1.31 - .m3u Crash PoC Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Window...

Total Video Player 1.31 - '.m3u' Crash (PoC)

Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP SP 3 Description: Total Video Player...

FreeBSD -- Incorrect crypt() hashing

Problem description: There is a programming error in the DES implementation used in crypt when handling input which contains characters that cannot be represented with 7-bit ASCII. When the input contains characters with only the most significant bit set 0x80, that character and all characters...

Concrete CMS 5.5.21 - Multiple Vulnerabilities

Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...

CVE-2011-3364

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...

WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection

WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection Exploit Title: WordPress Eventify - Simple Events plugin getresults$qry;...

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...

Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service

Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service source: https://www.securityfocus.com/bid/48642/info The Alice Modem is prone to a cross-site scripting vulnerability and a denial-of-service vulnerability because the device fails to properly handle user-supplied input. An attack...