CVE-2014-3963

ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors...

PT-2014-5639

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 6.0.1 Description The issue allows remote authenticated users to access arbitrary preview pictures due to improper permission checking. Recommendations For ownCloud Server versions prior to 6.0.1, update to...

CVE-2014-3963: Undefined Security Weakness

ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors...

PT-2014-5609

Name of the Vulnerable Software and Affected Versions Digital Zoom Studio DZS Video Gallery plugin for WordPress affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web...

CVE-2014-2706

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service system crash via network traffic that improperly interacts with the WLANSTAPSSTA state aka power-save mode, related to stainfo.c and tx.c...

Concrete CMS: XSS in Theme Preview Tools File

https://github.com/concrete5/concrete5/blob/master/web/concrete/tools/themes/preview.phpL7 Note that one of those values near the end is not escaped...

CVE-2014-0131

Use-after-free vulnerability in the skbsegment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation...

[MultiMonitorTool] Enable/disable/configure multiple monitors on Windows

MultiMonitorTool is a small tool that allows you to do some actions related to working with multiple monitors. With MultiMonitorTool, you can disable/enable monitors, set the primary monitor, save and load the configuration of all monitors, and move windows from one monitor to another. You can do...

Microsoft EMET 5.0 Technical Preview Released

SAN FRANCISCO – Enterprises beat up by wave after wave of Java exploits and calls to disable the platform may soon have some relief in sight. Microsoft’s free Enhanced Mitigation Experience Toolkit will soon have a new feature that allows users to configure where plug-ins, especially those target...

Announcing EMET 5.0 Technical Preview

Today, we are thrilled to announce a preview release of the next version of the Enhanced Mitigation Experience Toolkit, better known as EMET. You can download EMET 5.0 Technical Preview here. This Technical Preview introduces new features and enhancements that we expect to be key components of th...

Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH)

!/usr/bin ruby env Exploit Title: Publish-It 3.6d - SEH Buffer Overflow Date: 8/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: https://www.postersw.com Software Link: https://www.postersw.com/publish3.exe Version App: v3.6d Tested on: Windows 7 x86 - Version 6.1.7600 CVE:None Notes:...

Design/Logic Flaw

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

CVE-2013-6645

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

CVE-2013-6645

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

PT-2014-3147

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 32.0.1700.76 on Windows Google Chrome versions prior to 32.0.1700.77 on Mac OS X and Linux Description A use-after-free issue exists in the OnWindowRemovingFromRootWindow function, which can be triggered by...

CVE-2013-6645: Use After Free

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

PT-2014-3328

Name of the Vulnerable Software and Affected Versions S3 Video plugin versions prior to 0.983 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is specifically in the base parameter ...

Discuz plug-in arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

A txt,word Online Preview of the plug-in,Plug-In address: http://www.discuz.net/forum.php?mod=viewthread&tid=3 1 6 9 5 5 6 AppleScript $doc=$GET'doc'; $doc="../../../".$ doc; $filename=$GET'filename'; $ext=$GET'ext'; //set file type if$ext=='doc' $ext="application/msword"; if$ext=='xls'...

vBulletin vBSEO 3.2.0 / 3.6.0 Cross Site Scripting

Exploit Title : Cross Site Scripting XSS - Stored vulnerability in vBulletin SEO Plugin vBSEO. Found By : Yogesh Jaygadkar | http://www.jaygadkar.com/ Tested versions : vBSEO 3.2.0 & vBSEO 3.6.0 Tested with : vBulletin 4.0.6 & vBulletin 4.2.1 Vulnerable POST Parameter : sendtrackbacks Greetz to :...