9531 matches found
Microsoft Office Shared Component Security Bypass Vulnerability (2905238)
This host is missing an important security update according to Microsoft Bulletin MS13-106. OpenVAS Vulnerability Test $Id: secpodms13-106.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft Office Shared Component Security Bypass Vulnerability 2905238 Authors: Antu Sanadi Copyright: Copyright C 20...
MS13-106: Description of the security update for the 2007 Office suite: December 10, 2013
None None...
DSquare Exploit Pack: D2SEC_APACHE_ROLLER
Name| d2secapacheroller ---|--- CVE| CVE-2013-4212 Exploit Pack| D2ExploitPack Description| d2secapacheroller Notes|...
rubygem-actionpack: number_to_currency XSS
It was found that the numbertocurrency Action View helper did not properly escape the unit parameter. An attacker could use this flaw to perform a cross-site scripting XSS attack on an application that uses data submitted by a user in the unit parameter...
IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5.1 Multiple Vulnerabilities
IBM WebSphere Application Server 8.5 before Fix Pack 8.5.5.1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - A flaw exists related to Apache Ant and file compression that could lead to denial of service conditions. CVE-2012-209...
Steinberg MyMp3PRO 5.0 Buffer Overflow
!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044...
JVN#84221103: Cybozu Garoon vulnerable to mail header injection
Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains a mail header injection vulnerability in the Phone Messages function. Impact If the function that forwards Phone Messages to an email address is configured, the header of the email to be forwarded may be altered. Solutio...
JVN#23981867: Multiple cross-site scripting vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains multiple cross-site scripting vulnerabilities. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...
Kingsoft Office Writer 2012 8.1.0.3385 Buffer Overflow
Kingsoft Office Writer 2012 version 8.1.0.3385 SEH buffer overflow exploit that creates a malicious .wps file that pops calc.exe. !/usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 .wps Buffer Overflow Exploit SEH Version: 2012 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahren...
New Banking malware 'i2Ninja' being sold via underground Russian Cybercrime Market
Researchers at Trusteer spotted a new banking malware program on the underground Russian cybercrime market, that communicates with attackers over the I2P anonymity network is for sale on underground Russian cybercrime forums. Dubbed 'i2Ninja', malware has most of the features found in other...
DSquare Exploit Pack: D2SEC_SPIP_RCE_2
Name| d2secspiprce2 ---|--- CVE| CVE-2013-4557 Exploit Pack| D2ExploitPack Description| d2secspiprce2.py Notes|...
[Volatility v2.3] The advanced memory forensics framework (Support of OSX)
The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated...
CVE-2013-3906
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a...
MS KB2896666: Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (deprecated)
The remote host is missing one of the workarounds referenced in KB 2896666. The remote host has a version of the Microsoft Graphics Component installed that is potentially affected by a code execution vulnerability due to the way the application handles specially crafted TIFF images. %NASLMINLEVE...
PT-2013-1366 · Microsoft · Office Compatibility Pack +8
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Office 2003 SP3 Microsoft Office 2007 SP3 Microsoft Office 2010 SP1 and SP2 Microsoft Office Compatibility Pack SP3 Microsoft Lync 2010, 2010 Attendee, 2013, and Basic 20...
DSquare Exploit Pack: D2SEC_KINGVIEW
Name| d2seckingview ---|--- CVE| CVE-2013-6127 Exploit Pack| D2ExploitPack Description| KingView 6.53 ActiveX Control Remote Code Execution Vulnerability Notes|...
PayPal.com | Send Money Stored XSS Vulnerability
This vulnerability allows steal money, cookies, infection with exploit-pack and much, much more. If the user go to the "Send Money" tab, then vulnerability is exploited. The vulnerability has not been reported to PayPal Sec-Team. PayPal developers possibly do not know about its existence. This is...
IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 10.1 running on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow error exists related to input validation in the Audit facility and could lead to privilege escalation and denial of service attacks...
Immunity Canvas: IE_CDISPLAYPOINTER
Name| iecdisplaypointer ---|--- CVE| CVE-2013-3897 Exploit Pack| CANVAS Description| iecdisplaypointer Notes| CVE Name: CVE-2013-3897 VENDOR: Microsoft Notes: VersionsAffected: 8 Repeatability: Infinite References:...
