5333 matches found
Microsoft Internet Explorer 6.0 TABLE Status Bar URI Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attack...
Symantec Messaging Gateway 9.5.3-3 CSRF Vulnerability
No description provided by source. ======= Summary ======= Name: Symantec Messaging Gateway - Easy CSRF to add a backdoor-administrator for example Release Date: 30 November 2012 Reference: NGS00263 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor Reference: Systems...
Mozilla Firefox 0.x/1.x Large History File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15773/info Mozilla Firefox is reportedly prone to a remote denial-of-service vulnerability. This issue presents itself when the browser handles a large entry in the 'history.dat' file. An attacker may trigger this issue b...
Symantec Multiple Products SymEvent Driver Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20051/info Multiple Symantec products are prone to a local denial-of-service vulnerability. This issue occurs when attackers send malformed data to the 'SymEvent' driver. A local authenticated attacker may exploit this...
IceWarp Universal WebMail /admin/inc/include.php Multiple Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
Symantec Altiris DS SQL Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Symantec Sygate Management Server - (login) SQL Injection Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute
No description provided by source. $Id: symantecaltirisdeploymentdownloadandinstall.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...
Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may...
Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change
No description provided by source. !/usr/bin/python import urllib import urllib2 import re import sys print print Symantec Web Gateway = 5.0.3.18 Arbitrary Password Change print @Kc57 print \n if lensys.argv != 4: print Usage: poc.py RHOST username newpassword exit0 ip = sys.argv1 username =...
Microsoft Outlook Express 5/6 Script Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but appears to have...
Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...
IceWarp Universal WebMail /dir/include.html lang Parameter Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
Symantec Enterprise Firewall / Gateway Security HTTP Proxy Internal IP Leakage Weakness
No description provided by source. source: http://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component of the products may reveal the internal IP...
Symantec Backup Exec System Recovery Manager 7.0 FileUpload Class Unauthorized File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27487/info Symantec Backup Exec System Recovery Manager is prone to a vulnerability that allows arbitrary unauthorized files to be uploaded to any location on the affected server. This issue resides in the Symantec...
Microsoft Windows XP/2000/2003 Message Queuing Service Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8783/info It has been reported that the Microsoft Message Queuing service is prone to a heap overflow. The Symantec DeepSight analyst team is currently analyzing proof-of-concept exploit code for this issue. This record...
Symantec Alert Management System Intel Alert Originator Service Buffer Overflow
No description provided by source. $Id: symanteciao.rb 9298 2010-05-13 16:53:50Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Symantec Endpoint Protection Manager - Remote Command Execution Exploit
No description provided by source. import argparse import httplib Exploit Title: Symantec Endpoint Protection Manager Remote Command Execution Exploit Author: Chris Graham @cgrahamseven CVE: CVE-2013-5014, CVE-2013-5015 Date: February 22, 2014 Vendor Homepage:...
pcAnywhere 8.0/9.0/11.x Authentication Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15646/info Symantec pcAnywhere is vulnerable to a buffer overflow vulnerability. Because the flaw can be triggered prior to authentication, the vulnerability is exploitable by remote attackers without valid credentials. I...
Symantec Multiple Products Client Proxy ActiveX (CLIproxy.dll) Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote...