[FoxAnalysis] Firefox Internet History Analysis Software

FoxAnalysis Plus is a software tool for extracting, viewing and analysing internet history from the Mozilla Firefox web browser. The main features are described below: Extract History :: Extract history regarding bookmarks, cookies, downloads, favicons, form entries, logins, saved sessions and...

PT-2013-5770

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 8.4.0 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability or execute remote code, depending on the context. For Exchange Server, the...

MS13-105: Vulnerabilities in Microsoft Exchange Server could allow remote code execution: December 10, 2013

Resolves vulnerabilities in the WebReady Document Viewing and Data Loss Prevention features of Microsoft Exchange Server. These vulnerabilities could allow remote code execution in the security context of the LocalService account if an attacker sends an email message that contains a specially...

SA-CONTRIB-2013-083 - Quiz - Access Bypass

Access bypass on deleting quiz results The Quiz module provides tools for authoring and administering quizzes through Drupal. A quiz is given as a series of questions, with only one question appearing per page. Scores are then stored in the database. The module doesn't sufficiently check the dele...

October 2013 Oracle Java Critical Patch Update

On Tuesday, for the first time, Java security updates were included with the quarterly Oracle Critical Patch Update – and just as quickly, Java wasted no time elevating itself as the top concern for Oracle admins and security experts. Of the 51 Java patches released, 50 allow for remote code...

PT-2013-5796

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.4.0 through 8.4.1 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability and potentially execute arbitrary code. In the case of Exchange...

[Pyew v2.2] A Python tool for static malware analysis

Pyew is a command line python tool to analyse malware. It does have support for hexadecimal viewing, disassembly Intel 16, 32 and 64 bits, PE and ELF file formats it performs code analysis and let you write scripts using an API to perform many types of analysis, follows direct call/jmp instructio...

MS Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. OpenVAS Vulnerability Test $Id: secpodms13-061.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2876063 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Crowd OpenID server does not enforce profile ownership for viewing

Similar to CWD-3465, it seems that not enforce profile ownership for viewing. That is, a non-admin user called Mallory can view Alice's profile information if Mallory obtains Alice's profileId number. For example, https://openid.atlassian.com/secure/profile/editprofiles.action?profileID=15240744...

Crowd OpenID server does not enforce profile ownership for viewing

Similar to CWD-3465, it seems that not enforce profile ownership for viewing. That is, a non-admin user called Mallory can view Alice's profile information if Mallory obtains Alice's profileId number. For example, https://openid.atlassian.com/secure/profile/editprofiles.action?profileID=15240744...

PT-2013-4615

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4.1 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability or execute remote code, depending on the context. For Exchange...

PT-2013-3728

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4.0 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability or execute remote code, depending on the context. For Exchange...

Activity stream not respecting parent page restrictions

The Confluence Activity stream will display all pages that the user has access to according to the restrictions. However, if the user is limited in viewing a page due to inherited restrictions from a parent page, the page in question will still show up in the activity stream, and when following t...

DDIVRT-2013-51 DALIM Dialog Server 'logfile' Local File Inclusion

Title ----- DDIVRT-2013-51 DALIM Dialog Server 'logfile' Local File Inclusion Severity -------- High Date Discovered --------------- February 14, 2013 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: 0x00string, Ryan Oliver and r@b13$ Vulnerability Description...

Microsoft Exchange / FAST Search Server code execution

Code execution on Outlook Web Access document viewing / Advanced Filter Pack because of Oracle Outside In technology vulnerability...

MS Exchange Server Remote Code Execution Vulnerabilities (2809279)

This host is missing a critical security update according to Microsoft Bulletin MS13-012. OpenVAS Vulnerability Test $Id: secpodms13-012.nasl 5339 2017-02-18 16:28:22Z cfi $ MS Exchange Server Remote Code Execution Vulnerabilities 2809279 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

PT-2013-2316

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4 Microsoft Exchange Server affected versions not specified Description The issue allows attackers to affect availability or execute remote code, potentially via a heap-based buffer overflow in...

PT-2013-2291

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4 Microsoft Exchange Server affected versions not specified Description The issue allows attackers to affect availability. In the case of Microsoft Exchange Server, this can happen when a user...

CentOS Update for thunderbird CESA-2013:0145 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...