Microsoft Excel CVE-2013-3159 XML Files Handling Information Disclosure Vulnerability

Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2003 SP3 Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP1 32-bit editions...

Microsoft Word CVE-2013-3849 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Hand of Thief Linux Banking Trojan Not Ready For Primetime

Upon further examination, a new banking Trojan variant may not be as commercially viable as it was thought to be. Researchers at RSA Security have peeled back the layers this week on the Hand of Thief banking Trojan, a piece of malware that made headlines over the summer after it was thought to b...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

MS13-062: Vulnerability in Remote Procedure Call Could Allow Elevation of Privilege (2849470)

The remote host contains a flaw in the way that Windows handles asynchronous RPC requests, which can lead to elevation of privileges. An attacker could exploit this issue to run arbitrary code and take complete control of an affected system. C Tenable Network Security, Inc. include"compat.inc"; i...

MS Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. OpenVAS Vulnerability Test $Id: secpodms13-061.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2876063 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Immunity Canvas: NOVELL_NICM

Name| novellnicm ---|--- CVE| CVE-2013-3956 Exploit Pack| CANVAS Description| nicm.sys Privilege Escalation Notes| CVE Name: CVE-2013-3956 Notes: The IOCTL handler for the nicm.sys driver in Novell Client IR5 does not validate pointers from usermode buffers. When passing in the IOCTL 0x143B6B an...

DSquare Exploit Pack: D2SEC_SITESCOPE

Name| d2secsitescope ---|--- CVE| CVE-2013-2367 Exploit Pack| D2ExploitPack Description| HP SiteScope 11.20 runOMAgentCommand Remote Code Execution Vulnerability Notes|...

IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 before Fix Pack 8.5.5 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - The TLS protocol in the GSKIT component is vulnerable to a plaintext recovery attack. CVE-2013-0169, PM85211 - The...

DSquare Exploit Pack: D2SEC_STRUTS4

Name| d2secstruts4 ---|--- CVE| CVE-2013-2251 Exploit Pack| D2ExploitPack Description| d2secstruts4 Notes|...

Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER

Name| struts2defaultactionmapper ---|--- CVE| CVE-2013-2251 Exploit Pack| CANVAS Description| Apache Struts 2.0.0 - 2.3.15 RCE Notes| References: https://cwiki.apache.org/confluence/display/WW/S2-016 Repeatability: Infinite VENDOR: Apache CVE Url: https://vulners.com/cve/CVE-2013-2251 CVE Name:...

IBM WebSphere Application Server 7.0 < Fix Pack 29 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 29 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - The TLS protocol in the GSKIT component is vulnerable to a plaintext recovery attack. CVE-2013-0169, PM85211 - The...

Windows Media Format Runtime Remote Code Execution Vulnerability (2847883)

This host is missing a critical security update according to Microsoft Bulletin MS13-057. OpenVAS Vulnerability Test $Id: secpodms13-057.nasl 5339 2017-02-18 16:28:22Z cfi $ Windows Media Format Runtime Remote Code Execution Vulnerability 2847883 Authors: Arun kallavi Thanga Prakash S on 2013-08-...

PT-2013-4196 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2 through R2 SP1 Windows 7 version SP1 Description: The issue is related to the improper handling of objects in memor...

CVE-2013-4719

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4719

CVE-2013-4719 is a SQL injection vulnerability in the TYPO3 SEO Pack’s tt_news extension, affecting versions prior to 1.3.3. The weakness allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is the TYPO3 SEO Pack for tt_news; the exact root cause de...

ECShop shop system the latest versions contain vulnerabilities-vulnerability warning-the black bar safety net

This hole, actually I on 2 0 1 2 year 1 month of time to see ecshop on the analysis, originally due to feeling tasteless you didn't put out. Just under the official website latest version, didn't think also exist. Vulnerability file:/demo/index.php | 1 | if ! empty$POST'lang' //if not empty ---|-...

PT-2013-4553 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 and R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsoft Window...