Nero MediaHome 4.5.8.0 Denial Of Service Vulnerability

Nero MediaHome version 4.5.8.0 suffers from multiple denial of service vulnerabilities due to improper handling issues. Product: Nero MediaHome Vendor: Nero Vulnerable Versions: 4.5.8.0 and probably prior Tested Version: 4.5.8.0 in Windows 7 SP1 Vendor Notification: November 21, 2012 Public...

NFR Agent FSFUI Record File Upload Remote Command Execution

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This Metasploit module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0...

NFR Agent FSFUI Record File Upload RCE

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0.2 and NFR...

Mandriva Linux Security Advisory : openldap (MDVSA-2012:130)

A vulnerability was found and corrected in openldap : slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned CVE-2012-1164. The updated...

SA-CONTRIB-2012-130 - Jstool - Multiple Vulnerabilities

Javascript Tool enables administrators to edit any javascript file online from an admin panel. The module does not protect its menu paths, which contain sensitive information about all javascript files on the site and their contents. The module does not validate filenames which can lead to...

Mandriva Update for openldap MDVSA-2012:130 (openldap)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ZDI-12-130 : Apple QuickTime Player MP4A Uninitialized Pointer Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-130 : Apple QuickTime Player MP4A Uninitialized Pointer Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-130 August 3, 2012 - -- CVE ID: CVE-2011-3458 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affecte...

Mandriva Linux Security Advisory : apache (MDVSA-2011:168)

A vulnerability has been discovered and corrected in apache : The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary error state in the backend server via a malformed...

CVE-2010-0446: Undefined Security Weakness

Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors...

Mandriva Security Advisory MDVSA-2009:130-1 (gstreamer0.10-plugins-good)

The remote host is missing an update to gstreamer0.10-plugins-good announced via advisory MDVSA-2009:130-1. OpenVAS Vulnerability Test $Id: mdksa20091301.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:130-1 gstreamer0.10-plugins-good Authors: Thomas...

Mandrake Security Advisory MDVSA-2009:130 (gstreamer0.10-plugins-good)

The remote host is missing an update to gstreamer0.10-plugins-good announced via advisory MDVSA-2009:130. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mandriva Linux Security Advisory : gstreamer0.10-plugins-good (MDVSA-2009:130-1)

Multiple integer overflows in the 1 userinfocallback, 2 userendrowcallback, and 3 gstpngdectask functions ext/libpng/gstpngdec.c in GStreamer Good Plug-ins aka gst-plugins-good or gstreamer-plugins-good 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary cod...

Mandriva Update for drakxtools MDVA-2008:130 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:130 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Deutsch Telekomm T-Sinus 130 DSL Default Password (deprecated)

Binary data 4853.prm...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 29f5bfc5-ce04-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 29f5bfc5-ce04-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2005-4417

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...

HP-UX Security patch : PHCO_22591

The remote host is missing HP-UX Security Patch number PHCO22591 . Sec. Vulnerability in autoparms Rev. 01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16798; scriptversion"1.7";...

linux/x86 portbind port 5074 + fork 130 bytes

linux/x86 portbind port 5074 + fork 130 bytes. Shellcode exploit for linx86 platform / [email protected] 0x9abril0x7d2 syssocketcall 102 0x66 %eax, esta es nuestra rutina principal. En todas las subrutinas vamos a necesitar a: %eax = 0x66. Luego del archivo include/linux/net.h obtenemos l...