Unfixed XSS vulnerability at www.sagetra.com

Security researcher VirtualSystEm, has submitted on 01/01/2011 a cross-site-scripting XSS vulnerability affecting www.sagetra.com, which at the time of submission ranked 17945833 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

IrfanView 4.27 Denial Of Service

done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D JPEG2000.dll MD5: 50B3DCD4F32C9939722A905A06AD371A first...

RedHat Update for openssl RHSA-2010:0977-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0977-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Unfixed XSS vulnerability at www.pierotofy.it

Security researcher LordTittiS3000, has submitted on 12/12/2010 a cross-site-scripting XSS vulnerability affecting www.pierotofy.it, which at the time of submission ranked 92901 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

GLSA-201011-01 : GNU C library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201011-01 GNU C library: Multiple vulnerabilities Multiple vulnerabilities were found in glibc, amongst others the widely-known recent LDAUDIT and $ORIGIN issues. For further information please consult the CVE entries referenced...

BACnet OPC Client - Local Buffer Overflow (Metasploit) (2)

$Id: bacnetcsv.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

BACnet OPC Client Buffer Overflow

$Id: bacnetcsv.rb 10990 2010-11-11 20:09:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Slackware 12.2 / 13.0 / 13.1 / current : seamonkey (SSA:2010-300-01)

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-300-01. The text itself is...

Mozilla Firefox LookupGetterOrSetter函数悬停指针漏洞

BUGTRAQ ID: 44249 CVE ID: CVE-2010-3183 Firefox是一款非常流行的开源WEB浏览器。 Firefox的js3250.dll库中存在安全漏洞。在创建和删除JavaObject时，由于没有对LookupGetterorSetter 函数执行过滤检查，可能导致向JSValueToId函数传送悬停指针。远程攻击者可以利用这个漏洞以SYSTEM用户权限执行任意代码。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x...

Uploaderv6.1 Remote File Upload Vulnerability

Exploit for php platform in category web applications ============================================= Uploaderv6.1 Remote File Upload Vulnerability ============================================= Uploaderv6.1 Remote File Upload Vulnerability + Author : St0rM Hacker + Email :email protected + Site : :...

Adobe Acrobat Reader and Flash Player - 'newclass' Invalid Pointer

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | ' + self.eol else: self.content += self.eol + data + self.eol self.content += 'endobj' + self.eol def objSWFStreamself, objnum, data, stream: self.xrefs.appendlenself.content self.content += '%d 0 obj' % objnum...

Adobe Acrobat Reader and Flash Player (newclass) invalid pointer

Exploit for windows platform in category remote exploits ================================================================ Adobe Acrobat Reader and Flash Player newclass invalid pointer ================================================================ Title : Adobe Acrobat Reader and Flash Player...

Solaris 10 (x86) : 143526-01

SunOS 5.10x86: adddrv patch. Date this patch was last updated by Sun : Aug/30/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (sparc) : 143525-01

SunOS 5.10: adddrv patch. Date this patch was last updated by Sun : Aug/30/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Linux kernel 2.6.x KVM Intel VT-x扩展空指针引用拒绝服务漏洞

BUGTRAQ ID: 42582 CVE ID: CVE-2010-0435 Linux Kernel是开放源码操作系统Linux所使用的内核。 主机系统上的处理器启用了Intel VT-x扩展时存在空指针引用漏洞。如果模拟器受骗模拟了mov to/from DR指令，由于没有初始化kvmx86ops-set|getdr，可能会触发这个空指针引用，导致主机崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://patchwork.kernel.org/patch/95725/...

RedHat Update for wireshark RHSA-2010:0625-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2010:0625-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Area Galid (galid) SQL Injection Exploit (.py)

Exploit for php platform in category web applications ============================================== Area Galid galid SQL Injection Exploit .py ============================================== !/usr/bin/env python -- coding:utf-8 -- Area Galid galid SQL Injection Exploit .py Author LifeSteaLeR Foun...

RHEL 5 : acroread (RHSA-2010:0503)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0503 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple vulnerabilities in Adobe...

Mozilla Firefox字符映射错误显示漏洞

BUGTRAQ ID: 41866 CVE ID: CVE-2010-1210 Firefox是一款流行的开源WEB浏览器。 一些8位编码包含有未定义的位置，映射到了U+FFFD。在显示的时候，可能不会显示紧随之后的字符。例如，windows-1253中的 '\xD1', '\xD2', '\xD3', 'xD4'序列应为U+3A1, U+FFFD, U+3A3, U+3A4（也就是字符串ΡΣΤ），但实际结果为U+3A1, U+FFFD, U+3A4，缺少了U+3A3字符（也就是ΡΤ字符串，缺少Σ）。 在某些站点上这可能导致跨站脚本问题，因为服务器上过滤掉了某些应显示的字符。 Mozil...

RedHat Update for openldap RHSA-2010:0543-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0543-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...