iOS7 system aeration lock screen vulnerability:two unit operation you can control the most recent application-vulnerability warning-the black bar safety net

Recently users have discovered a new iOS 7 system vulnerabilities, this vulnerability can not help but creepy! Exploit this vulnerability to bypass the password input interface, in don't know password to open your most recently used software. And this process in just 5 seconds! After testing, thi...

UBUNTU-CVE-2013-6472

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the 1 log API, 2 enhanced RecentChanges, and 3 user watchlists...

Localize: XSS in main page

If a project name is saved with a XSS string such as: “!-- and a translator visits it, it'll result in the xss executing in the main page, due to the fact that it shows your recent visits. Screen: http://prntscr.com/3awwuv...

Debian Security Advisory DSA 2846-1 (libvirt - several vulnerabilities)

Multiple security issues have been found in Libvirt, a virtualisation abstraction library: CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denial of...

Design/Logic Flaw

The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information revision-deleted IPs via the Recent Changes page...

CVE-2013-4569

The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information revision-deleted IPs via the Recent Changes page...

OSX Network Share Mounter

This module lists saved network shares and tries to connect to them using stored credentials. This does not require root privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX Network...

VLC Media Player Multiple Vulnerabilities - July 13 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...

CVE-2013-1080

creationtimestamp| type| source ---|---|--- 2013-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24938 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zenworkscontrolcenterupload.rb 2025-02-06...

Stefan Esser

Mobile security researcher Stefan Esser discussed the security model of Apple iOS and some of the recent changes the company has made to lock it down even further...

Ruby on Rails XML Processor YAML Deserialization Code Execution

This module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the application...

UMPlayer Portable 0.95 Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: UMPlayer Portable Edition Date: 2012-11-28 Exploit Author: p3kok Vendor Homepage: http://www.umplayer.com/ Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/ Version: 0.95Portable Edition...

UMPlayer Portable 0.95 - Crash (PoC)

UMPlayer Portable 0.95 - Crash PoC Exploit Title: UMPlayer Portable Edition Date: 2012-11-28 Exploit Author: p3kok Vendor Homepage: http://www.umplayer.com/ Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/ Version: 0.95Portable Edition Compiled 4.7.0...

UMPlayer Portable 0.95 - Crash (PoC)

Exploit Title: UMPlayer Portable Edition Date: 2012-11-28 Exploit Author: p3kok Vendor Homepage: http://www.umplayer.com/ Software Link: http://sourceforge.net/projects/umplayer/ or http://www.umplayer.com/download/ Version: 0.95Portable Edition Compiled 4.7.0 Tested on: xp sp 2 Crash POC...

CVE-2012-4483

The commonsdiscussionviewsdefaultviews function in modules/features/commonsdiscussion/commonsdiscussion.viewsdefault.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce intended node access restrictions, which might allow remote attackers to obtain sensiti...

Flogr 2.5.6 / 2.3 Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities Details: ======== Multiple non persistent cross site scripting vulnerabilities are detected in the Flogr v2.5.6 & v2.3 photo gallery CMS. The vulnerability allows remote attackers to hija...

CVE-2012-2354

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL...

UBUNTU-CVE-2012-2354

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL...

Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities

Document Title: =============== Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=656 Release Date: ============= 2012-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 656...

Censorship - Global Concern : THN Magazine March Edition

Censorship - Global Concern : THN Magazine March Edition It is March Madness at The Hacker News as we release the latest edition of our magazine which gives internet security a thorough look and and a fascinating read. Pierluigi Paganini gives a great interview on the woes of internet security an...