2073 matches found
[SECURITY] Fedora 18 Update: libupnp-1.6.18-1.fc18
The Universal Plug and Play UPnP SDK for Linux provides support for building UPnP-compliant control points, devices, and bridges on Linux...
Polycom® HDX® Video End Points Web Management Cross Site Scripting (XSS) vulnerability
Polycom® HDX® Video End Points Web Management Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-4970 - Deloitte Argentina Advisory Code: DTTAR-20120001 - Vendor Status: CONFIRMED - Public Disclosure Date: December, 23rd, 2012. - Vendors Affected: Polycom - http://www.polycom.com/ - Systems...
Polycom HDX Video End Points crossite scripting
Crossite scripting in web management interface...
CVE-2012-4970
CVE-2012-4970 is a cross-site scripting (XSS) vulnerability in the web management interface of Polycom HDX Video End Points. Affected software includes UC APL prior to 2.7.1_J and commercial prior to 3.0.5. Polycom fixed the issue starting with commercial build 3.0.5 and UC APL 2.7.1.1_J; the spe...
ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities
Document Title: =============== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=689 Release Date: ============= 2012-11-15 Vulnerability Laboratory ID VL-ID: ==================================== 689...
An In-Depth Look Into Data Stacking
Mandiant's Nick Bennett and Jake Valletta discussed data stacking at MIRcon™ last month. If you were unable to attend the talk, we will discuss this data analysis technique here on the M-Unition blog. What is Data Stacking? Data stacking is the application of frequency analysis to large volumes o...
[Diviner] OWASP Zed Attack Proxy Extension
Diviner is a unique platform that attempts to predict the structure of the server-side memory, source code and processes,by executing scenarios aimed to fingerprint behaviors that derive from specific lines of code, processes or memory allocations,by employing the use of a variety of coverage...
VulnCheck KEV: CVE-2010-2862
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile maxp table...
Sogou mobile phone input method sites exist SQL injection vulnerability-vulnerability warning-the black bar safety net
Vulnerability type: SQL injection vulnerability Hazard rating: low The self-assessment Rank of: 5 Vulnerability status: the vendor has confirmed Brief description: Browse sogou input method web site, found that the presence ofSQL injectionvulnerabilities. Detailed description: 1...
Adobe Flash Player 11.3 Font Parsing Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...
escon supportportal pro 3.0 - Persistent Cross-Site Scripting
escon supportportal pro 3.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May...
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: SimpleMail Version: 1.0.6 free version Vendor Site: http://codecanyon.net/item/wp-simplemail/1130008?ref=tinsley Software Download:...
ESCON SupportPortal Pro 3.0 Cross Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailTraq Version: 2.17.3.3150Mar 5th, 2012 Vendor Site: http://www.mailtraq.com/ Software Download: http://www.mailtraq.com/30day Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...
mailenable enterprise 6.5 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailTraq Version: 2.17.3.3150Mar 5th, 2012 Vendor Site: http://www.mailtraq.com/ Software Download: http://www.mailtraq.com/30day Timeline: 29 May 2012: Vulnerability...
MailEnable Enterprise 6.5 Cross Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...
Input validation
Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service radio-interface input-queue hang via IAPP 0x3281 packets, aka Bug ID CSCtc12426...
