MT Fire Eagle

LFI http://joomlacode.org/gf/project/jfireeagle/frs/http://www.moto-treks.com 190410 product considered retired and to be replaced by dev Authors:...

Wordpress plugin dynamic-font-replacement-4wp Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress plugin dynamic-font-replacement-4wp Arbitrary File Upload /FPD Vulnerability Date: 21/01/2013 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Category : webapps Dork :...

Mozilla Firefox String Replacement Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Mozilla...

Wordpress Dynamic Font Replacement 1.3 plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Dynamic Font Replacement 1.3 plugin SQL Injection Vulnerability Date: 2013-01-27 Author: bd0rk Software Link: http://downloads.wordpress.org/plugin/dynamic-font-replacement-4wp.zip Version: 1.3 EN Category:: web...

Mozilla Products: Multiple vulnerabilities

Background Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla...

MS13-002: Description of the security update for XML Core Services 4.0: January 8, 2013

None None...

MS12-076: Description of the security update for Excel 2007 (xlconv-x-none.msp): November 13, 2012

Describes the security update for Excel 2007 xlconv-x-none.msp, that was released on November 13, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-076. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

CyanogenMod Fixes Flaw That Logged Users Unlock Codes

CyanogenMod, a popular open source firmware replacement for Android phones, has patched a hole in its code that was locally logging swipe gestures used to unlock phones. The problem, which stemmed from a line of code that was never intended for release, was fixed in an update posted for download ...

Getting Started: Your Guide to Windows 8

Back in 1991, Microsoft released their first version of Windows, a mouse-driven graphical user interface that revolutionized the way we use computers, both at home and in the workplace. Microsoft's newest operating system has a whole new interface and loads of new features. Windows 8 introduces a...

MS12-066: Description of the security update for InfoPath 2007 Service Pack 3: October 9, 2012

None None...

Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability

========================================================================== Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability ==========================================================================...

FreeWebshop <= 2.2.9 Multiple SQLi and XSS Vulnerabilities - Active Check

FreeWebshop is prone to multiple SQL injection SQLi and cross- site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Update for systemd FEDORA-2012-6456

Check for the Version of systemd OpenVAS Vulnerability Test Fedora Update for systemd FEDORA-2012-6456 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

MS12-060: Description of the security update for Visual Basic 6.0 Service Pack 6: August 14, 2012

Resolves a vulnerability that exists in Windows common controls that could allow remote code execution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released the...

UBUNTU-CVE-2012-2745

The copycreds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service panic via a crafted application that uses the fork system call...

SuSE Update for MozillaFirefox openSUSE-SU-2012:0234-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201202341.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:0234-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

kernel: cred: copy_process() should clear child->replacement_session_keyring

The copycreds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service panic via a crafted application that uses the fork system call...

Design/Logic Flaw

The doreplace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETADMIN capability ...

[SECURITY] Fedora 16 Update: xinetd-2.3.14-47.fc16

Xinetd is a secure replacement for inetd, the Internet services daemon. Xinetd provides access control for all services based on the address of the remote host and/or on time of access and can prevent denial-of-access attacks. Xinetd provides extensive logging, has no limit on the number of serve...

The star outside the mention of the right new ideas&the star outside security Bulletin(mention the right vulnerability)-vulnerability warning-the black bar safety net

Statement, This is not what a star outside 0DAY, which at Best, only one in could not find a writable executable directory of a mention of the right ideas. I dare not say that I first found, there may be other people also found, and also in the use. In fact, numerous examples demonstrate that the...