MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

VLC Media Player ABC File Instruction Field Parsing Heap Overflow

A remote code execution vulnerability has been reported in the libmodplug library used by VLC Media Player. The vulnerability is due to an error while parsing Instruction fields in ABC files with the style sheet directive "MIDI drum" or "MIDI gchord". Remote attackers could exploit this...

DNN (DotNetNuke) __dnnVariable Parameter XSS

The version of DNN installed on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input to the ' dnnVariable' parameter. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to inject arbitrary...

SAP NetWeaver SOAP Request SXPG_COMMAND_EXECUTE Command Execution

A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface. The vulnerability is due to insufficient validation of incoming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted SOAP request to the affected...

Novell iPrint Client For Windows IPP Response Stack Buffer Overflow (CVE-2013-1091)

A stack buffer overflow vulnerability exists in Novell iPrint Client. The vulnerability is due to insufficient validation of IPP responses that can lead to a stack buffer overflow. Successful exploitation can allow an attacker to execute arbitrary code on a target system in the security context o...

Internet Explorer CTreeNodeobject Use After Free (MS13-047; CVE-2013-3119)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error while handling certain objects when processing HTML and script code. Successful exploitation could lead to arbitrary code execution under the security context of the target user...

Novell ZENworks Asset Management Directory Traversal (CVE-2011-2653)

A Directory Traversal vulnerability has been reported in the Novell ZENworks Asset Management. The vulnerability is due to insufficient input validation when parsing the FileUpload parameter. A remote attacker can exploit this issue by sending a specially crafted packet to the target server...

Splunk 5.0.x < 5.0.3 Multiple Vulnerabilities

According to its version number, the Splunk Web hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by an unspecified cross-site scripting vulnerability. An attacker can exploit this issue to inject arbitrary HTML and script code into a user's...

HP System Management Home Page Command Injection (CVE-2013-3576)

A Remote PHP Code Injection has been reported in HP System Management. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious request containing a specially crafted parameter to the target server. Successful exploitation would result...

InduSoft Web Studio Unauthenticated Insecure Remote Operations - High Confidence (CVE-2011-4051)

A code execution vulnerability has been reported in the Remote Agent component of InduSoft Web Studio. The vulnerability is due to the absence of authentication for incoming requests to the Remote Agent service. A remote, unauthenticated attacker could exploit this vulnerability by sending crafte...

Sun Java GIF File Handling Memory Corruption - Improved Performance (CVE-2007-0243)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Apple QuickTime TeXML Color String Parsing Buffer Overflow - Improved Performance (CVE-2012-0663)

A stack buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to insufficient validation of a string length when processing certain elements inside QuickTime TeXML files. A remote attacker can exploit this issue by enticing a target user to open a specially...

Microsoft Exchange Server MIME Base64 Decoding Code Execution (MS07-026; CVE-2007-0213) - Improved Performance

A vulnerability exists in the way Microsoft Exchange servers process certain MIME-encoded attachments. An attacker can exploit this vulnerability for code execution in SYSTEM security context...

EMC AlphaStor Device Manager Buffer Overflow (CVE-2013-0930)

A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the...

EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)

A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the...

Splunk 4.3.x < 4.3.6 Unspecified XSS

According to its version number, the Splunk Web hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize unspecified user-supplied input before returning it to the user. An unauthenticated, remote attacker can exploit this issue to...

CKEditor sample_posteddata.php XSS

The version of the CKEditor installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'sampleposteddata.php' script. An unauthenticated, remote attacker may be able to leverage this to inject arbitrary HTML an...

PHP-Fusion forum/viewthread.php highlight Parameter XSS

The version of PHP-Fusion installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'highlight' parameter of the 'forum/viewthread.php' script. An unauthenticated, remote attacker may be able to leverage this to inject...

Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)

Multiple buffer overflow vulnerabilities have been reported in Apple iTunes. The vulnerabilities are due to a bounds checking error in iTunes while handling specially crafted .m3u files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .m3u file with ...

Bugzilla show_bug.cgi id Parameter XSS

The version of Bugzilla installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'showbug.cgi' script. An attacker may be able to leverage this to inject arbitrary HTML and script code...