2777 matches found
Ubuntu 13.04 : linux vulnerabilities (USN-1998-1)
An information leak was discovered in the Linux kernel when reading broadcast messages from the notifypolicy interface of the IPSec keysocket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory. CVE-2013-2237 Kees Cook discovered flaw in the Human...
Immunity Canvas: CVE_2013_3881
Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...
New Mozilla Plug-N-Hack Tool Integrates Browsers and Security Tools
The Mozilla security team is developing a new proposed standard that will make it easier for researchers to integrate some of their tools with Firefox and other browsers. The standard, known as Plug-n-Hack, is an open project that Mozilla hopes will be adopted by researchers and tool makers. A lo...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to browsevideos.php or the 2 cat parameter to groups.php...
PT-2013-1000 · D Link · Dsr-500N +6
Name of the Vulnerable Software and Affected Versions: D-Link DSR-1000 versions prior to firmware 1.08B77 D-Link DSR-1000N versions prior to firmware 1.08B77 D-Link DSR-150 versions prior to firmware 1.08B44 D-Link DSR-150N versions prior to firmware 1.05B64 D-Link DSR-250 versions prior to...
Oracle Linux 6 : openssh (ELSA-2013-0519)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0519 advisory. 5.3p1-84.1 - Add a 'netcat mode' ssh -W 860809 5.3p1-83 - fix the required authentications patch 869903 5.3p1-82 - check return value of PK11Authenticate in...
XSS and FPD vulnerabilities in Search 'N Save for WordPress
Hello 3APA3A! I want to inform you about vulnerabilities in Search 'N Save plugin for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in ZeroClipboard.swf, which is used in the plugin. In February I wrote about Cross-Site Scripting...
WordPress Search N Save XSS / Path Disclosure
Hello list! I want to inform you about vulnerabilities in Search 'N Save plugin for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in ZeroClipboard.swf, which is used in the plugin. In February I wrote about Cross-Site Scripting...
Alt-N MDaemon < 13.0.4 Multiple Vulnerabilities
The remote Windows host is running a version of Alt-N MDaemon that is earlier than 13.0.4. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to the 'Strip X-Headers' setting that could allow the application to crash. Issue 10358 - An input...
N-point virtual host management system Business Edition SQL injection vulnerability-vulnerability warning-the black bar safety net
Brief description: All versions of N-point virtual host management system of the commercial version are receiving this vulnerability affects visually more than half of Taobao virtual host merchant caught quickly fix it N point is so I Detailed description:...
Serious Vulnerabilities Found in Popular Home Wireless Routers
Hackers love to attack Java. Why? Well, not only because it is full of holes, but because it’s everywhere, embedded on endpoints, Web browsers, mobile devices and more. The same goes for attacking wireless routers; they’re buggy and they’re everywhere. A handful of vulnerabilities were identified...
TP-Link Wireless Lite N Access Point Directory Traversal Vulnerability
This module tests whether a directory traversal vulnerability is present in versions of TP-Link Access Point 3.12.16 Build 120228 Rel.37317n. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
KLA10250 Vulnerabilities in Alt-N MDaemon
Multiple unspecified vulnerabilities were found in MDaemon. By exploiting these vulnerabilities malicious users can execute arbitrary code, bypass security restrictions, cause denial of service or obtain sensitive information. These vulnerabilities can be exploited via unknown vectors. Original...
N the point of the commercial version vulnerabilities pass to kill 0day and the use of the method-vulnerability warning-the black bar safety net
Have to say the N points is really a shit Even if he developed the commercial version, even if a commercial version comes with security settings also can not conceal his junk. Well complaining about it on the line next critical time to First of all Baidu search keywords: inurl: mmdatabase. asp I...
Alt-N MDaemon's WorldClient Username Enumeration Vulnerability
==================================================================== Alt-N MDaemon's WorldClient Username Enumeration Vulnerability ==================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type:...
Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability
====================================================================== Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability ====================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type:...
Alt-N MDaemon's WorldClient Disclosure of Authentication Credentials Vulnerability
========================================================================================== Alt-N MDaemon's WorldClient Disclosure of Authentication Credentials Vulnerability ========================================================================================== Software: Alt-N MDaemon v13.0.3...
Alt-N MDaemon Email Body HTML/JS Injection Vulnerability
============================================================== Alt-N MDaemon Email Body HTML/JS Injection Vulnerability ============================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type: HTML/JS Injection Remot...
Alt-N MDaemon multiple security vulnerabilities
Multiple web interface vulnerabilities...
Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability
================================================================== Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability ================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/ Vuln Type: Remote Code...