Google Chrome PDF Viewer Multiple Vulnerabilities (Mac OS X)

This host is installed with Google Chrome and is prone to use after free and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromepdfviewermultvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Google Chrome PDF Viewer Multiple Vulnerabilities Mac OS X Authors: Madhuri...

WordPress SimpleMail Plugin Email fields script insertion vulnerabilities and fixes-vulnerability warning-the black bar safety net

WordPress is a PHP language and MySQL database development Blog（blog, blogengine, users can support PHP and MySQL database server on build your own Blog. SimpleMail plugin for WordPress 1.0.6 and other versions in the realization on the presence of a plurality of vulnerabilities, through the e-ma...

Google Chrome PDF Viewer Multiple Vulnerabilities - Mac OS X

Google Chrome is prone to use after free and denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress SimpleMail Plugin Email字段脚本插入漏洞

CVE ID: CVE-2012-2579 WordPress是一种使用PHP语言和MySQL数据库开发的Blog（博客、网志引擎，用户可以在支持PHP和MySQL数据库的服务器上建立自己的Blog。 SimpleMail plugin for WordPress 1.0.6及其他版本在实现上存在多个漏洞，通过电子邮件的字段"To"、"From"、"Date"、"Subject"传递的输入没有正确过滤即用于显示电子邮件，可被恶意利用执行脚本插入攻击，查看后会在受影响站点的用户浏览器中执行 0 WordPress SimpleMail Plugin 1.x 厂商补丁： WordPress...

Viscosity - Local Privilege Escalation

!/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source alternative. Unfortunately, this exploi...

Viscosity setuid-set ViscosityHelper Privilege Escalation

This module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X. The vulnerability exists in the setuid ViscosityHelper, where an insufficient validation of path names allows execution of arbitrary python code as root. This module has been tested successfully on Viscosity 1.4.1 over Mac OS X...

Setuid Tunnelblick Privilege Escalation

This module exploits a vulnerability in Tunnelblick 3.2.8 on Mac OS X. The vulnerability exists in the setuid openvpnstart, where an insufficient validation of path names allows execution of arbitrary shell scripts as root. This module has been tested successfully on Tunnelblick 3.2.8 build...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID ce84e136-e2f6-11e1-a8ca-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID ce84e136-e2f6-11e1-a8ca-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

afterlogic mailsuite pro (VMware Appliance) 6.3 - Persistent Cross-Site Scripting

afterlogic mailsuite pro VMware Appliance 6.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: AfterLogic Mailsuite Pro VMware Appliance Version: 6.3 Vendor Site: http://www.afterlogic.com/ Software Download:...

Google Chrome Multiple Vulnerabilities - August 12 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug12macosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Google Chrome Multiple Vulnerabilities - August 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download:...

AfterLogic Mailsuite Pro 6.3 Cross Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: AfterLogic Mailsuite Pro VMware Appliance Version: 6.3 Vendor Site: http://www.afterlogic.com/ Software Download: http://www.afterlogic.com/download/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

Wordpress Postie Plugin 1.4.3 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received fr...

Opera Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnaug12macosx.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Multiple Vulnerabilities - August12 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbone Networks...

AfterLogic Mailsuite Pro (VMware Appliance) 6.3 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: AfterLogic Mailsuite Pro VMware Appliance Version: 6.3 Vendor Site: http://www.afterlogic.com/ Software Download: http://www.afterlogic.com/download/ Timeline: 29 May 2012:...

Opera Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Opera and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperashowpagedosvulnmacosx.nasl 6022 2017-04-25 12:51:04Z teissa $ Opera Lenovo 'Show Page' Denial Of Service Vulnerability - Mac OS X Authors: Rachana Shetty Copyright: Copyright ...

EmailArchitect Enterprise Email Server 10.0 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

Opera Multiple Vulnerabilities (Aug 2012) - Mac OS X

Opera is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Vulnerabilities (Aug 2012) - Mac OS X

Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...