Design/Logic Flaw

muttssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

Integer overflow

Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...

CVE-2009-3607

Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...

Overland Guardian OS 5.1.041 - Local Privilege Escalation

Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less /tmp/top.log and type in '!/bin/sh'. Th...

SLES11: Security update for glib2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glib2 glib2-doc glib2-lang libgio-20-0 libglib-20-0 libgmodule-20-0 libgobject-20-0 libgthread-20-0 More details may also be found by searching for the SuSE...

SLES11: Security update for gstreamer

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gstreamer-010-plugins-base gstreamer-010-plugins-base-doc gstreamer-010-plugins-base-lang libgstinterfaces-010-0 More details may also be found by searching...

Unfixed XSS vulnerability at e-myhosting.com

Security researcher XSS, has submitted on 10/04/2009 a cross-site-scripting XSS vulnerability affecting e-myhosting.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/07/2009. It is currently unfixe...

CVE-2009-3491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Kinfusion SportFusion comsportfusion component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a teamdetail action to index.php...

HEAT Call Logging 8.01 SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

HEAT Call Logging 8.01 SQL Injection

No description provided by source. = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.asp...

HEAT Call Logging 8.01 - SQL Injection

HEAT Call Logging 8.01 - SQL Injection = ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=-...

HEAT Call Logging 8.01 SQL Injection

Exploit for unknown platform in category web applications ==================================== HEAT Call Logging 8.01 SQL Injection ==================================== -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a...

HEAT Call Logging 8.01 - SQL Injection

= ;otokoyama; = -=HEAT Call Logging Version 8.01=- "The HEAT family is a comprehensive service solution, combining core technologies with a variety of expansion options, so any enterprise can build a tailored solution." -=web=- http://www.frontrange.com/heat.aspx -=attack=- U:' OR HEATPass IS NOT...

SuSE 10 Security Update : OpenLDAP2 (ZYPP Patch Number 6485)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Unfixed XSS vulnerability at www.derives.net

Security researcher jath, has submitted on 22/09/2009 a cross-site-scripting XSS vulnerability affecting www.derives.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently...

Design/Logic Flaw

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

Microsoft IIS 5.0 FTP Stack Overflow

!/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2googlemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a minute or two for the egg to be found...

MS IIS 5.0/6.0 FTP Server remote overflow vulnerability(win2k)-vulnerability warning-the black bar safety net

IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found &exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2 0 0 9 - KEEP THIS 0DAY PRIV8 use I:Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

Unfixed XSS vulnerability at beckyred.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting beckyred.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currently...

Unfixed XSS vulnerability at checkingaccts.com

Security researcher Dark.Man, has submitted on 15/08/2009 a cross-site-scripting XSS vulnerability affecting checkingaccts.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currently...