625 matches found
Design/Logic Flaw
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
CVE-2014-0347
The CVE-2014-0347 vulnerability affects Websense Triton Unified Security Center 7.7.3 (and related Websense suites) prior to Hotfix 31. In the Settings module, the Log Database and User Directories areas fail to sanitize input, allowing an authenticated user to change an input field from type="pa...
CVE-2014-0347
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
Triton Unified Security Center多个信息泄露漏洞
Bugtraq ID:66687 CVE ID:CVE-2014-0347 Triton Unified Security Center是基于Web浏览器的图形管理的安全应用。 Triton Unified Security Center在实现上存在多个信息泄露漏洞，攻击者可利用这些漏洞查看高级用户存储的凭证。 0 Websense TRITON Unified Security Center 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.websense.com/content/support/library/deployctr/v76/tusccd.asp...
Websense Triton Unified Security Center 7.7.3 information disclosure vulnerability
Overview Websense Triton Unified Security Center 7.7.3 and possibly earlier versions contains an information disclosure vulnerability which could allow an authenticated attacker to view stored credentials of a possibly higher privileged user. Description CWE-200: Information ExposureWhen logged...
MS13-101: Description of the security update for Windows kernel-mode drivers: December 10, 2013
None None...
FreeBSD : Joomla! -- Core XSS Vulnerabilities (4158c57e-5d39-11e3-bc1e-6cf0490a8c18)
The JSST and the Joomla! Security Center report : 20131101 Core XSS Vulnerability Inadequate filtering leads to XSS vulnerability in comcontact. 20131102 Core XSS Vulnerability Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds. 20131103 Core XSS Vulnerabilit...
Tenable Security Center Installed
Binary data securitycenterinstalled.nbin...
Tenable Security Center Detection
Binary data securitycenterdetect.nbin...
SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8491)
Mozilla Firefox has been updated to the 17.0.10ESR release, which fixes various bugs and security issues : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory...
Use-after-free when updating offline cache — Mozilla
Security researcher Byoungyoung Lee of Georgia Tech Information Security Center GTISC used the Address Sanitizer tool to discover a use-after-free during state change events while updating the offline cache. This leads to a potentially exploitable crash...
Ajax File And Image Manager 1.1 Code Execution
----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...
FreeBSD : Joomla! -- XXS and DDoS vulnerabilities (57df803e-af34-11e2-8d62-6cf0490a8c18)
The JSST and the Joomla! Security Center report : 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...
Joomla! -- XXS and DDoS vulnerabilities
The JSST and the Joomla! Security Center report: 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...
Site2Host.com SQL Injection
site2host Web Design Sql Injection Vulnerability Exploit Title : site2host Web Design Sql Injection Vulnerability Google Dork: inurl:Site Designed by Site2host.com vender : http://site2host.com/ Author: BHG Security Center Home: http://cc.black-hg.org/ - http://greyh4t.com/cc/ Tested on:...
Multiple Vulnerabilities in the Cisco WebEx Recording Format Player
The Cisco WebEx Recording Format WRF player contains six buffer overflow vulnerabilities. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system with the privileges of a targeted user. The Cisco WebEx WRF Player is an application...
AVG Anti-Virus 'hcp://' Protocol Handler RCE Vulnerability
AVG Anti-Virus is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Poweradmin Cross Site Scripting
poweradmin Cross Site Scripting Exploit Title :poweradmin Cross Site Scripting Google Dork: "a completer poweradmin - credits" 0r "poweradmin - credits" Author: BHG Security Center Home: http://cc.black-hg.org - http://greyh4t.com/cc/ Tested on: linux+apache Finders:Siavash [email protected]...
Mambo / Joomla FCKEditor Local File Inclusion
mambo /joomla fckeditor lfi Vulnerability Exploit Title :mambo /joomla fckeditor lfi Vulnerability Google Dork: /mambots/editors/fckeditor/editor/filemanager/browser/default Author: BHG Security Center Home: http://cc.black-hg.org - http://greyh4t.com/cc/ Tested on: linux+apache Finders:Siavash...
