Solaris 10 (sparc) : 127411-16

Message Queue 4.1 Update 4 Patch 6 SunOS 5.9 5.10 Core product. Date this patch was last updated by Sun : Mar/12/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 125358-22

NSSNSPRJSS 3.21 Solaris: NSPR 4.11 / NSS 3.21 / JSS 4.3.2 Mainte. Date this patch was last updated by Sun : Mar/22/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Google Chrome Multiple Security Vulnerabilities (Mar 2018) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

kandoo.cz XSS vulnerability

Open Bug Bounty ID: OBB-458414 Description| Value ---|--- Affected Website:| kandoo.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

jadegreenevents.com XSS vulnerability

Open Bug Bounty ID: OBB-457704 Description| Value ---|--- Affected Website:| jadegreenevents.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

North Korean Malicious Cyber Activity

The Department of Homeland Security DHS and the Federal Bureau of Investigation FBI have identified Trojan malware variants—referred to as BANKSHOT—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. US-CERT...

saoraphael.com XSS vulnerability

Open Bug Bounty ID: OBB-454607 Description| Value ---|--- Affected Website:| saoraphael.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

nana.sa XSS vulnerability

Open Bug Bounty ID: OBB-447746 Description| Value ---|--- Affected Website:| nana.sa Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

The vulnerability of the Mozilla SeaMonkey software package, which allows local users to elevate their privileges

Mozilla SeaMonkey software contains a vulnerability that can be exploited when working with mar files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar files during updates...

The vulnerability of the Thunderbird email client, which allows local users to increase the level of their privileges

The Mozilla Thunderbird browser contains a vulnerability that can be exploited when working with .mar files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of .mar files during updates...

The vulnerability of the Firefox ESR browser allows local users to elevate their privileges level.

The Mozilla Firefox ESR browser contains a vulnerability that can be exploited when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...

The vulnerability of the Firefox browser, which allows local users to elevate their privileges levels

The Mozilla Firefox browser contains a vulnerability that occurs when working with mar-files. Exploiting this vulnerability allows a local user to elevate their privileges and modify the content of mar-files during updates...

CVE-2016-2826

The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution, which might allow local users to gain privileges via a Trojan horse file...

File overwrite and privilege escalation through Mozilla Windows updater — Mozilla

Security researcher Frédéric Hoguin reported a mechanism where the Mozilla Windows updater could be used to overwrite arbitrary files. He found that files extracted by the updater from a MAR archive are not locked for writing and can be overwritten by other processes while the updater is running....

Dell KACE K1000 - Arbitrary File Upload (Metasploit)

Exploit for unix platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Dell KACE K1000 File Upload', 'Description' = %q This module exploits a...

CVE-2016-3984

CVE-2016-3984 affects McAfee VirusScan Console and multiple McAfee components (MAR, MA, DXL, DLPe, MDC, ENS, IPS, VSE) on Windows. Local administrators can bypass self-protection rules and disable the antivirus engine by modifying registry keys. Impact: partial to full antivirus disablement; CVSS...

Google Chrome Multiple Vulnerabilities (Mar 2016) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

dogworld.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.dogworld.co.uk/dwinfo/www/delivery/ck.php?oaparams=2bannerid=89zoneid=19cb=5b8fbd506eoadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

artexhibitionlink.com XSS vulnerability

Vulnerable URL: https://artexhibitionlink.com/expand.htm?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19771097 Google...

visitamuseum.com XSS vulnerability

Vulnerable URL: http://visitamuseum.com/en/picviewer.asp?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...