4004 matches found
Apple Mac OS X Lion Kernel xnu Privilege Escalation
/ Apple Mac OS X Lion Kernel Notes: This exploit leverage a stack overflow vulnerability to escalate privileges. The vulnerable function nfsconvertoldnfsargs does not verify the size of a user-provided argument before copying it to the stack. As a result by passing a large size, a local user can...
Joomla! JomSocial component < 3.1.0.1 - Remote code execution
------------------------------------------------------------- Joomla! JomSocial component 3.1.0.1 - Remote code execution ------------------------------------------------------------- == Description == - Software link: http://www.jomsocial.com/ - Affected versions: All versions = 2.6 and 3.1.0.1...
Cross-site Scripting Vulnerability
A cross-site scripting vulnerability exists in the web-based device management interface whereby data provided by the user is echoed back to the user without sanitization. Ref 59010...
SA-CONTRIB-2014-008 - Tribune - Cross Site Scripting (XSS)
A tribune is a type of chatroom. The module doesn't sufficiently filter user provided text from Tribune node titles. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a Tribune node. CVE identifiers issued CVE-2014-8075 Versions affected...
Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...
MS14-002 Microsoft Windows ndproxy.sys Local Privilege Escalation
This module exploits a flaw in the ndproxy.sys driver on Windows XP SP3 and Windows 2003 SP2 systems, exploited in the wild in November, 2013. The vulnerability exists while processing an IO Control Code 0x8fff23c8 or 0x8fff23cc, where user provided input is used to access an array unsafely, and...
Novell Client 2 SP3 nicm.sys Local Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
PT-2013-4300
Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description General information about the issue is not provided. Recommendations At the moment, there is no information about a newer version that contains a...
PT-2013-3905
Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description The issue is related to a security problem, but specific details are not provided. Recommendations At the moment, there is no information about a...
JVN#69880570: Opera address bar spoofing vulnerability
Opera contains a vulnerability where certain characters may be displayed in the address bar, causing 2 URLs to potentially be indistinguishable from each other. Impact Phishing attacks may be possible, due to the difficulty in determining that the URL displayed in the address bar and the URL bein...
Joomla 1.5.26 ja_purity Cross Site Scripting
waraxe-2012-SA087 - Reflected XSS in Joomla 1.5.26 "japurity" template =============================================================================== Author: Janek Vind "waraxe" Date: 03. May 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-87.html CVE:...
JVN#41657660: Safari for iOS vulnerable to cross-site scripting
Safari for iOS provided by Apple does not support the "attachment" value for the HTTP Content-Disposition header, resulting in a cross-site scripting vulnerability. Impact Opening a maliciously crafted file may lead to an arbitrary script being executed on the user's web browser. Solution Update...
Fedora 13 : whatsup-1.12-1.fc13 (2011-2794)
Mon Mar 7 2011 Ruben Kerkhof 1.12-1 - Upstream released new version - Link against system-provided expat 652981 - Fixes FTBFS 661001 - Drop patch for incorrect open which was merged upstream - no InfiniBand on s390x Note that Tenable Network Security has extracted the preceding description block...
Fedora 14 : whatsup-1.12-1.fc14 (2011-2801)
Mon Mar 7 2011 Ruben Kerkhof 1.12-1 - Upstream released new version - Link against system-provided expat 652981 - Fixes FTBFS 661001 - Drop patch for incorrect open which was merged upstream - Thu Sep 30 2010 Dan Horak 1.10-2 - no InfiniBand on s390x Note that Tenable Network Security has...
Linux RDS Protocol Local Privilege Escalation
Exploit for linux platform in category local exploits ============================================= Linux RDS Protocol Local Privilege Escalation ============================================= / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and...
[SECURITY] [DSA 2088-1] New wget packages fix potential code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-2088-1 [email protected] http://www.debian.org/security/ Florian Weimer August 05, 2010 http://www.debian.org/security/faq -...
SA-CONTRIB 2010-075 - Tagging - Cross Site Scripting
The Tagging module provides an alternative input widget and other features for taxonomy terms. The module does not properly escape user-provided content submitted to free-tagging vocabularies displayed on node previews, leading to a Cross Site Scripting XSS vulnerability. Any user with permission...
XSS in page renderer
An XSS vulnerability has been identified in the page renderer. This issue provides a fix for this problem. The severity of this issue is rated HIGH. Please see http://confluence.atlassian.com/x/ZILmD for other security related issues as well as more information on how we rate issues...