[SECURITY] Fedora 12 Update: ejabberd-2.1.2-2.fc12

ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...

PT-2010-1852 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 8 Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2 Description: A remote code execution issue exists due to improper input validation in the URL...

Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability

Microsoft Windows operating system is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900740. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

acroread: multiple code execution flaws (APSB10-02)

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPCMSRGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leadin...

Microsoft Windows NT/2000/2003/2008/XP/Vista/7 - 'KiTrap0D' User Mode to Ring Escalation (MS10-015)

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip KiTrap0D.zip E-DB Note: Make sure to run "vdmallowed.exe" pre-compiled inside the subfolder. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...

Memory corruption

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessin...

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows 2000/XP (Windows)

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows 2000/XP Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95069 Diese Prüfung bezieht sich auf die 10...

IT-Grundschutz M4.049: Absicherung des Boot-Vorgangs für ein Windows NT/2000/XP System (Windows)

IT-Grundschutz M4.049: Absicherung des Boot-Vorgangs für ein Windows NT/2000/XP System Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94205 Diese Prüfung...

IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows 2000/XP (Windows)

IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows 2000/XP Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94217 Diese Prüfung bezieht sich auf die 1...

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows 2000/XP - Windows

IT-Grundschutz M5.090: Einsatz von IPSec unter Windows 2000/XP Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95069 Diese Prüfung bezieht sich auf die 10...

MS Patches Critical Flaw in EOT Font Engine

The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT Embedded OpenType fonts. The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems. The vulnerability, which was...

Microsoft Plans Quiet January Patch Tuesday

Microsoft’s first Patch Tuesday for 2010 will be very light: A solitary bulletin addressing a vulnerability that is rated critical only for Windows 2000 users. According to Redmond’s advance notice for the next batch of patches due on January 12, the bulletin is rated “low” for every other affect...

Snitz Forums 2000 active.asp HTTP X-Forwarded-For Header SQL Injection

The version of Snitz Forums 2000 hosted on the remote host fails to sanitize input to the 'X-Forwarded-For' header in the 'active.asp' script when called with the 'AllRead' POST parameter set to 'Y' before using it to construct a database query. An unauthenticated, remote attacker can leverage th...

Snitz Forums 2000 'X-Forwarded-For' SQL Injection Vulnerability

Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Microsoft SQL Server sp_replwritetovarbin Memory Corruption

$Id: ms09004spreplwritetovarbin.rb 8068 2010-01-05 00:02:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-4554

Multiple cross-site scripting XSS vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or HTML via 1 the url parameter to popsendtofriend.asp, related to a crafted onload attribute of an IMG element; or 2 an onload attribute in a sound tag...

CVE-2009-4554: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or HTML via 1 the url parameter to popsendtofriend.asp, related to a crafted onload attribute of an IMG element; or 2 an onload attribute in a sound tag...

InterSystems Cache UtilConfigHome.csp Argument Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'InterSystems Cach...

MS03-046 Exchange 2000 XEXCH50 Heap Overflow

$Id: ms03046exchange2000xexch50.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Workstation Service NetpManageIPCConnect Overflow

$Id: ms06070wkssvc.rb 8023 2009-12-29 19:22:43Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...