Splunk 4.3.3 Arbitrary File Disclosure

================================================================= - Release date: September 3rd, 2012 - Discovered by: Marcio Almeida of CIPHER Intelligence Labs - Severity: Medium - CVSS Base Score: 6.3 AV:N/AC:M/Au:S/C:C/I:N/A:N/E:P/RL:U/RC:C...

Splunk 4.3.3 - Arbitrary File Read

Splunk 4.3.3 - Arbitrary File Read Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...

CVE-2012-1296

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

CVE-2012-1296

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

Blogspot Cross Site Scripting

Exploit Title: Blogspot Cross Site Scripting Date: 13/08/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com/ Category: - Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Proof of Concept: 1.1 "alertdocument.cookie Post String key & save : Preview :...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

CentOS Update for frysk CESA-2011:1327 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2634

Cross-site scripting XSS vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed...

PT-2012-3617 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 9, and 10 Consumer Preview Description: The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code by attempting to access a nonexistent...

FeedDemon vulnerable to arbitrary script execution

Overview FeedDemon is vulnerable to arbitrary script execution. FeedDemon is an RSS/Atom feed reader. FeedDemon is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information when using the "feed preview" option. Daiki Fukumori of Cybe...

Firstload.com Cross Site Scripting

Exploit Title: Firstload.com usenet Provider Cross Site Scripting Google Dork: - Date: 30/3/2012 Author: Crim3R contact : [email protected] Tested on: ALL CVE : XSS Vulnerable searching for filenames is Vulnerable to Cross Site Scripting http://www.firstload.com/?uniq=1364f75a67db1bc2&log=47382&fn=...

Microsoft Internet Explorer Code Execution and DoS Vulnerabilities

Microsoft Internet Explorer is prone to arbitrary code execution and denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Meta: IDOR in Facebook Messages webcam photos

I found that photos people take with their webcam within private message conversations can be accessed without proper authorization via a photo preview mechanism. Even when the sender decides to discard the image after seeing the preview, it can later still be retrieved through this same preview...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

CentOS Update for frysk CESA-2011:1327 centos4 i386

Check for the Version of frysk OpenVAS Vulnerability Test CentOS Update for frysk CESA-2011:1327 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for ecryptfs-utils-75-5.el5_ CESA-2011:1241 centos5 i386

Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test CentOS Update for ecryptfs-utils-75-5.el5 CESA-2011:1241 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

CentOS 4 : frysk (CESA-2011:1327)

An updated frysk package that fixes one security issue is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ecryptfs security update

CentOS Errata and Security Advisory CESA-2011:1241 Updated ecryptfs-utils packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386

Check for the Version of ecryptfs-utils OpenVAS Vulnerability Test CentOS Update for ecryptfs-utils CESA-2009:1307 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...