CVE-2014-9748

The uvrwlockt fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service deadlock or possibly have unspecified other impact by leveraging a race...

CVE-2014-9748

The CVE-2014-9748 entry concerns libuv’s uv_rwlock_t fallback on Windows XP/Server 2003, where the lock handling allows a thread to release another thread’s lock. This race condition can cause a denial of service via deadlock and possibly other unspecified impact. Affected component: libuv, speci...

Design/Logic Flaw

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-2136)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Office Product Key Finder 1.5.4 - Denial of Service (PoC)

Office Product Key Finder 1.5.4 - Denial of Service PoC Exploit Title: Office Product Key Finder 1.5.4 - Denial of Service PoC Date: 2020-01-06 Vendor Homepage: http://www.nsauditor.com/ Software Link: http://www.nsauditor.com/downloads/officeproductkeyfindersetup.exe Exploit Author: Gokkul Teste...

The Citrix Licensing Service Crashes on Startup

The Citrix Licensing Service crashes on startup when using License Server versions 11.6.1 build 10007 through 11.9 installed on Windows Server 2003, Windows Server 2008 or Windows Server 2008 R2. The following Event ID 1000 is logged in the Windows Application Event Log: Event Type: ErrorEvent...

Citrix Licensing Service Unexpectedly Stops When Logging Off the Server Console

The Citrix Licensing service unexpectedly stops on License Server 11.6.1 Build 10007 running on Windows Server 2003, when logging off the server console. This issue occurs when logging off the physical console or logging off RDP session 0 that was established using the /console or /admin switch...

DEBIAN-CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

UBUNTU-CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

Design/Logic Flaw

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

Alcatel-Lucent Omnivista 8770 Remote Code Execution

Exploit Title: Alcatel-Lucent Omnivista 8770 - Remote Code Execution Google Dork: inurl:php-bin/webclient.php Date: 2019-12-01 Author: 0x1911 Vendor Homepage: https://www.al-enterprise.com/ Software Link:...

Alcatel-Lucent Omnivista 8770 - Remote Code Execution

Alcatel-Lucent Omnivista 8770 - Remote Code Execution Exploit Title: Alcatel-Lucent Omnivista 8770 - Remote Code Execution Google Dork: inurl:php-bin/webclient.php Date: 2019-12-01 Author: 0x1911 Vendor Homepage: https://www.al-enterprise.com/ Software Link:...

Alcatel-Lucent Omnivista 8770 - Remote Code Execution

Exploit Title: Alcatel-Lucent Omnivista 8770 - Remote Code Execution Google Dork: inurl:php-bin/webclient.php Date: 2019-12-01 Author: 0x1911 Vendor Homepage: https://www.al-enterprise.com/ Software Link:...

Juniper Junos Space < 19.2R1 Multiple Vulnerabilities (JSA10951)

According to its self-reported version number, the remote Junos Space version is prior to 19.2R1. It is, therefore, affected by multiple vulnerabilities: - A memory double free vulnerability exists in The libcurl API function called curlmaprintf before version 7.51.0 due to an unsafe sizet...

EulerOS 2.0 SP5 : curl (EulerOS-SA-2019-2136)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482 - curl before version 7.51.0 uses outdated IDNA 2003...

Microsoft Windows Server 2012 - Group Policy Remote Code Execution

Microsoft Windows Server 2012 - Group Policy Remote Code Execution Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution Date: 2019-10-28 Exploit Author: Thomas Zuk Version: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2,...

Exploit for Use After Free in Microsoft

Run msfconsole meterpreter/multi/handler to listen on 192.1...

Exploit for Use After Free in Microsoft

CVE-2019-0708 initial exploit for CVE-2019-0708, BlueKeep CVE-...

[SECURITY] Fedora 30 Update: rdesktop-1.8.6-1.fc30

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...