ZDI-12-034 : Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-034 : Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-034 February 22, 2012 - -- CVE ID: CVE-2012-0150 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

Microsoft Windows Media Player ASX Meta-File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Wordpress Verve Meta Boxes 1.2.8 File Upload

File upload vulnerability in Wordpress Verve Meta Boxes plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

SuSE 11.1 Security Update : system-config-printer (SAT Patch Number 5607)

The following issues have been fixed : - system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. - system-config-printer did not properly quote shell meta characters in...

http-generator NSE Script

Displays the contents of the "generator" meta tag of a web page default: / if there is one. Script Arguments http-generator.path Specify the path you want to check for a generator meta tag default to '/'. http-generator.redirects Specify the maximum number of redirects to follow defaults to 3...

CVE-2011-5030

Cross-site scripting XSS vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."...

CVE-2011-5030

The CVE refers to a Cross-site scripting (XSS) vulnerability in the Drupal Meta tags quick module (7.x-2.x) prior to version 7.x-2.3. It allows remote authenticated users with certain permissions to inject arbitrary scripts/HTML via unspecified vectors (likely related to entity bundle names). Rem...

CVE-2011-5030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."...

PT-2011-5177

Name of the Vulnerable Software and Affected Versions Drupal Meta tags quick module versions 7.x-2.x before 7.x-2.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors,...

Design/Logic Flaw

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the...

CVE-2011-4854

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the...

SA-CONTRIB-2011-059 - Meta tags quick - Cross Site Scripting (XSS)

The Meta tags quick module provides a simple tool to add meta tags to a site. The module doesn't consistently filter user input which could lead to a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer...

SuSE 10 Security Update : dhcp6 (ZYPP Patch Number 7465)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

CVE-2011-3152

DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade...

ganglia-info NSE Script

Retrieves system information OS version, available memory, etc. from a listening Ganglia Monitoring Daemon or Ganglia Meta Daemon. Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. The information retrieved includes HDD size,...

WordPress Facebook Opengraph Meta Plugin <= 1.0 - SQL Injection

Facebook Opengraph Meta plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

Microsoft Windows Kernel Denial of Service Vulnerability (2556532)

This host is missing an important security update according to Microsoft Bulletin MS11-068. OpenVAS Vulnerability Test $Id: secpodms11-068.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Denial of Service Vulnerability 2556532 Authors: Veerendra GG Copyright: Copyright c 2011 SecPod...

MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities

Document Title: =============== MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 125 Product & Service Introduction: =============================== MODx helps you take control of...

FestOS <= 2.3c TinyBrowser File Upload Code Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...