D-Link DIR636L Remote Command Injection Vulnerability

D-Link DIR636L suffers from a remote command injection vulnerability. SWISSCOM CSIRT SECURITY ADVISORY - http://www.swisscom.com/security CVE ID: CVE-2015-1187 Product: D-Link DIR636L Vendor: D-Link Subject: Remote Command Injection - Incorrect Authentication Effect: Remotely exploitable Author:...

D-Link/TRENDnet - NCC Service Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'D-Link/TRENDnet NCC Service Command Injection', 'Description' = %q This module exploits a remote command injection vulnerabilit...

CVE-2015-1187

creationtimestamp| type| source ---|---|--- 2015-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41677 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/multinccpingexec.rb 2020-10-15 15:07:04+00:00| seen|...

CVE-2013-1187

Cisco Jabber Extensible Communications Platform (Jabber XCP) Connection Manager is affected by CVE-2013-1187. The vulnerability arises from insufficient validation of login data, allowing remote attackers to cause a denial of service (service crash) by sending a sequence of malformed login packet...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - multiple flaws were found in the mmap and mremap implementations. A local user could use these flaws to cause a local denial of service or escalate their privileges. CVE-2010-0291, Important - a NULL pointer dereference flaw was found in the Fas...

Scientific Linux Security Update : poppler on SL5.x i386/x86_64

Multiple integer overflow flaws were found in poppler. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179, CVE-2009-1187, CVE-2009-1188 Multiple buff...

Scientific Linux Security Update : java (jdk 1.5.0) on SL4.x, SL5.x i386/x86_64

Flaws in the JRE allowed an untrusted application or applet to elevate its privileges. This could be exploited by a remote attacker to access local files or execute local applications accessible to the user running the JRE CVE-2008-1185, CVE-2008-1186 A flaw was found in the Java XSLT processing...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 380e8c56-8e32-11e1-9580-4061862b8c22 OpenVAS Vulnerability Test $ Description: Auto generated from VID 380e8c56-8e32-11e1-9580-4061862b8c22 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu: Security Advisory (USN-1430-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS Update for dovecot CESA-2011:1187 centos4 i386

Check for the Version of dovecot OpenVAS Vulnerability Test CentOS Update for dovecot CESA-2011:1187 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Ubuntu Update for linux-lts-backport-maverick USN-1187-1

Ubuntu Update for Linux kernel vulnerabilities USN-1187-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11871.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-lts-backport-maverick USN-1187-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2011-1187

Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1187

CVE-2011-1187 affects Google Chrome prior to 10.0.648.127, allowing remote attackers to bypass the Same Origin Policy via an unspecified error-message leak vector. The vulnerability targets the browser’s SOP checks, enabling cross-origin access that should be restricted. Public sources within the...

CVE-2011-1187

Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

Debian Security Advisory DSA 2053-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2053-1. OpenVAS Vulnerability Test $Id: deb20531.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2053-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Java for Mac OS X 10.5 Update 2

The remote host is missing Java for Mac OS X 10.5 Update 2. One or more of the following components are affected: Java OpenVAS Vulnerability Test Java for Mac OS X 10.5 Update 2 LSS-NVT-2010-029 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribut...

Java for Mac OS X 10.5 Update 2

The remote host is missing Java for Mac OS X 10.5 Update 2. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

[SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2053-1 [email protected] http://www.debian.org/security/ dann frazier May 25, 2010 http://www.debian.org/security/faq -...

Linux Kernel TIPC功能空指针引用漏洞

BUGTRAQ ID: 39120 CVE ID: CVE-2010-1187 Linux Kernel是开放源码操作系统Linux所使用的内核 Linux Kernel的透明进程间通讯（TIPC）功能存在空指针引用错误。本地用户可以在进入到网络模式（NETMODE）之前通过AFTIPC发送特制数据报触发这个漏洞，导致内核崩溃 Linux kernel 2.6.33 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...