CVE-2012-5679

Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5679

CVE-2012-5679 is a buffer underflow in Adobe Photoshop Camera Raw prior to 7.3 that allows remote code execution via unspecified vectors. The vulnerability is tied to the Photoshop Camera Raw plug‑in’s TIFF/LZW/image processing handling, with multiple sources (NVD entry and Nessus/OpenVAS advisor...

CVE-2012-5680

CVE-2012-5680 concerns a buffer overflow in the Adobe Photoshop Camera Raw ecosystem (specifically the Camera Raw plug‑in / Camera Raw component) prior to version 7.3. The weakness is exploitable by unspecified vectors and can lead to arbitrary code execution on vulnerable hosts. Several connecte...

CVE-2012-5679: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2012-5680: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors...

PT-2012-6078

Name of the Vulnerable Software and Affected Versions Adobe Photoshop Camera Raw versions prior to 7.3 Description A buffer overflow issue allows attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the...

PT-2012-6077

Name of the Vulnerable Software and Affected Versions Adobe Photoshop Camera Raw versions prior to 7.3 Description A buffer underflow issue allows attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the...

Web Help Desk XSS Vulnerability

Exploit for php platform in category web applications Author: loneferret Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

Apple iOS SMS伪造漏洞

Apple iOS是一款苹果公司开发的移动设备上的操作系统。 Apple iOS上的SMS存在安全漏洞，允许攻击者获取敏感信息或进行伪造攻击。 SMS消息的文本负载中，UDH User Data Header段是一个可选的，但定义了很多手机不兼容的高级功能。其中有个选项允许用户更改文本的回复地址，如果目的手机兼容此消息，并且如果接收者尝试回复文本，那么他就不会回应原来的号码，而是指定的那个。大多数运营商不会检查这部分消息，这意味着攻击者可以任意指定此段，如修改为911或其他号码。 要利用这个SMS漏洞，需要攻击者可以RAW PDU格式发送文本。 0 Apple iOS 厂商解决方案...

flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments...

CentOS Update for kernel CESA-2011:1849 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for qemu-img CESA-2012:0050 centos6

Check for the Version of qemu-img OpenVAS Vulnerability Test CentOS Update for qemu-img CESA-2012:0050 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Low: Red Hat Security Advisory: xorg-x11-server security and bug fix update

Updated xorg-x11-server packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...

kernel security and bug fix update

2.6.32-220.23.1.el6 - net bond: Make LRO flag follow slave settings Neil Horman 831176 794647 2.6.32-220.22.1.el6 - net ipv4/netfilter: TCP and raw fix for iproutemeharder Jiri Benc 824429 812108 2.6.32-220.21.1.el6 - security fix compile error in commoncap.c Eric Paris 806725 806726 CVE-2012-212...

Raw CMS Cross Site Scripting

Exploit Title : Raw Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.weareraw.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Raw"...

broadcast-pppoe-discover NSE Script

Discovers PPPoE Point-to-Point Protocol over Ethernet servers using the PPPoE Discovery protocol PPPoED. PPPoE is an ethernet based protocol so the script has to know what ethernet interface to use for discovery. If no interface is specified, requests are sent out on all available interfaces. As...

Microsoft Office 2003 Home/Pro 0day

No description provided by source. !/usr/bin/python ----------------------------------------------------------------------------------- Exploit: Microsoft Office 2003 Home/Pro 0day - Tested on XP SP1,2.3 Authors: b33f Ruben Boonen && g11tch Chris Hodges One shellcode to rule them all, One shellco...

cups security and bug fix update

1.4.2-44 - Init script should source /etc/sysconfig/cups bug 744791 1.4.2-43 - The scheduler might leave old job data files in the spool directory STR 3795, STR 3880, bug 735505. 1.4.2-42 - A further fix for imageto filters crashing with bad GIF files STR 3914, bug 714118. 1.4.2-41 - The imageto...

CVE-2011-4647: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the 1 code or 2 raw BBcode tags...

PT-2011-5014

Name of the Vulnerable Software and Affected Versions Geeklog version 1.8.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the story creation feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the code or raw BBcod...