Google Chrome 5.0.375.99更新修复多个安全漏洞

BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...

Adobe Shockwave Player Director文件分析ATOM size无限循环漏洞

CVE ID: CVE-2010-1282 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析atom size时，不当处理导致代码无限循环。 成功利用能导致cpu 100%,造成拒绝服务攻击。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

Adobe - 'util.printf()' Local Buffer Overflow (Metasploit) (1)

$Id: adobeutilprintf.rb 9212 2010-05-03 17:13:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

Kojoney (SSH honeypot) remote DoS

= Affected software : Name : Kojoney Description : Low interaction SSH honeypot Version : 0.0.4.2 Service : TCP/22 = Patched version : http://sourceforge.net/projects/kojoney/files/kojoney-0.0.4.2.tar.gz/download = Technical details : Emulation of the wget and curl commands is made via calls to...

CVE-2010-0446: Undefined Security Weakness

Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors...

Skype for Linux 2.1 Beta - Multiple Strange Behaviour Vulnerabilities

Skype for Linux 2.1 Beta - Multiple Strange Behaviour Vulnerabilities Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link:...

Skype For Linux Denial Of Service / HTML Injection

Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link: http://www.skype.com/intl/it/download/skype/linux/ Version: =2.1 Beta the latest version...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-095 December 9, 2009 -- CVE ID: CVE-2009-3849 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...

Facial Recognition Research Claims Near 100% Accuracy

Mohamed Abdel-Mottaleb, professor and chair in the UM Department of Electrical and Computer Engineering has developed state-of-the-art systems capable of photographing an image of someone’s face and ear and comparing it against pre-stored images of the same person, with 95-100 percent accuracy...

Core FTP Server 1.0 Denial Of Service

!/usr/bin/env python Core FTP Server 1.0, build 304 Remote Denial of Service Exploit Pre Auth Found By: DrIDE Tested On: Windows XPSP3 Download: http://www.coreftp.com/server/ Notes: This will cause CPU usage to go to 100% and prevent new connections Usage: ./script import socket, sys def banner:...

Code injection

Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i formerly Lights Out 100 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors...

HP servers with LO100i (HP Lights Out 100) DoS

No description provided...

CVE-2009-1426: Undefined Security Weakness

Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i formerly Lights Out 100 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service panic via unknown vectors...

CVE-2009-2458

Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service panic via unknown vectors...

CVE-2009-2458

Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service panic via unknown vectors...

CVE-2009-2458

CVE-2009-2458 affects Sun Fire V215 Server when using XVR-100 graphics cards on system boards with part number 375-3463 and hardware dash level -04 or later. The vulnerability is described as unspecified and leads to a remote denial of service (panic) via unknown vectors. The associated reference...

CVE-2009-2458: Undefined Security Weakness

Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service panic via unknown vectors...