7988 matches found
Important: Red Hat Security Advisory: jasper security update
Updated jasper packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)
A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer such as Nautilus to crash or, potentially, execute arbitrary cod...
RHEL 6 : jasper (RHSA-2011:1807)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1807 advisory. JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Two heap-based buffer overflow flaws were found in the wa...
Serv-U FTP Server <4.2 Buffer Overflow
Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Serv-U FTP...
[CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Discovery by: 1 Peter Adkins [email protected] Access: 1 Local;...
Cisco Nexus OS (NX-OS) Command Injection
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Discovery by: 1 Peter Adkins Access: 1 Local; authenticated access is...
German Engineer Arrested In Card Skimming Plot
A German engineer was sentenced to three years in jail on Friday after he was found transporting card skimming technology into Britain according to a report from Reuters UK. Thomas Beeckmann, 26, was stopped at London’s Victoria Coach Station in June with 17 electronic scamming circuits. The...
CVE-2011-2000
Microsoft Internet Explorer 6–9 is affected by CVE-2011-2000 (Body Element Remote Code Execution Vulnerability). The flaw arises in how IE handles body elements during node swaps: when a call to swapNode occurs on a document with two body nodes, IE frees an attribute field for one body node and l...
Microsoft Internet Explorer Body元素内存破坏漏洞(MS11-081)
BUGTRAQ ID: 49965 CVE ID: CVE-2011-2000 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理Body元素时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码或导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...
Microsoft Internet Explorer Multiple Vulnerabilities (2586448)
This host is missing a critical security update according to Microsoft Bulletin MS11-081. OpenVAS Vulnerability Test $Id: secpodms11-081.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2586448 Authors: Veerendra G.G Copyright: Copyright c 2011 SecPod...
Microsoft Internet Explorer 'SwapNode()' CVE-2011-2000 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aur...
Internet Explorer Body Element Memory Corruption (MS11-081; CVE-2011-2000)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker could trigger this vulnerability by enticing an unsuspecting victim to open a specially...
CVE-2000-1247
The CVE affects Apache JServ 1.1.2, specifically the jserv-status handler in jserv.conf. Its default configuration includes an allow from 127.0.0.1 line, allowing local users to access the jserv/ URI and disclose JDBC passwords or other sensitive information. The available documents do not specif...
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials
By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier, without credentials. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56210; scriptversion"1.5"...
SMB Use Host SID to Enumerate Local Users Without Credentials
Using the host security identifier SID, Nessus was able to enumerate local users on the remote Windows system, without credentials. C Tenable Network Security, Inc. @PREFERENCES@ include'compat.inc'; if description scriptid56211; scriptversion"1.12";...
Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities
The host is running Snitz and is prone to SQL injection and cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsnitzforums2000xssnsqlinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities Authors:...
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...
CVE-2010-4826
SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the MNAME parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the MNAME parameter. NOTE: some of these details are obtained from third party information...