CVE-2012-6334

The CVE-2012-6334 entry concerns Samsung Galaxy devices' SamsungDive Track My Mobile feature on Android. The vulnerability arises because Location APIs are not properly implemented in Track My Mobile, enabling physically proximate attackers to inject arbitrary location data via a simple GPS locat...

BlazeDVD 6.1 PLF Exploit DEP/ASLR Bypass

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BlazeDVD 6.1 PLF...

CVE-2012-5183

The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files...

CVE-2012-5182

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application...

Loctouch for Android vulnerable in handling of implicit intents

Overview Loctouch for Android contains a vulnerability in the handling of implicit intents. Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure...

JVN#42625179: Loctouch for Android vulnerable in handling of implicit intents

Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains a vulnerability in the handling of implicit intents. Impact Location logs that include non-public information may be leaked to a third party through a malicious Android application...

SuSE Update for Mozilla Suite openSUSE-SU-2012:1412-1 (Mozilla Suite)

Check for the Version of Mozilla Suite OpenVAS Vulnerability Test $Id: gbsuse201214121.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for Mozilla Suite openSUSE-SU-2012:1412-1 Mozilla Suite Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

openSUSE: Security Advisory for Mozilla Suite (openSUSE-SU-2012:1412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GPS based tracking service provided by Samsung vulnerable to thieves

Samsung which is currently believed to the highest Smartphones Seller in the World is now providing a Remote tracking solution in all its smartphones to Track the lost phone with the name "Samsung Dive". The Service is based on the Architecture which primarily acquires precise location of the sma...

GPS based tracking service provided by Samsung vulnerable to thieves

Samsung which is currently believed to the highest Smartphones Seller in the World is now providing a Remote tracking solution in all its smartphones to Track the lost phone with the name "Samsung Dive". The Service is based on the Architecture which primarily acquires precise location of the sma...

Mozilla Thunderbird Multiple Vulnerabilities-01 November12 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln01nov12win.nasl 5950 2017-04-13 09:02:06Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities-01 November12 Windows Authors: Arun Kallavi...

Mozilla Firefox Multiple Vulnerabilities-01 November12 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvuln01nov12win.nasl 6018 2017-04-24 09:02:24Z teissa $ Mozilla Firefox Multiple Vulnerabilities-01 November12 Windows Authors: Rachana Shetty Copyright: Copyrigh...

CVE-2012-3516

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

Memory corruption

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

CVE-2012-3516

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

WordPress Zingiri Web Shop 2.5.0 Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...

Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which...

Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which...

Mozilla: Frames can shadow top.location (MFSA 2012-103)

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct...

WordPress Madebymilk SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress madebymilk Theme SQL Injection | Google Dork: inurl:/madebymilk/voting-popup.php | Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...