UltraVNC 1.0.1 - Client Buffer Overflow (Metasploit)

$Id: ultravncclient.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Microsoft Publisher PUB File Processing Memory Corruption (MS06-054; CVE-2006-0001)

There exists a stack overflow vulnerability in the Microsoft Publisher product. The flaw is triggered when a malicious PUB file is parsed by the affected component. A successful attack targeting this vulnerability may lead to the execution of arbitrary code. In an attack case where code injection...

CVE-2006-3271

creationtimestamp| type| source ---|---|--- 2010-04-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12438...

A XSS in User_ChkLogin.asp of PowerEasy 2006

PowerEasy is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

CVE-2006-4584

creationtimestamp| type| source ---|---|--- 2010-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12385...

PowerEasy 2006 - 'ComeUrl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39696/info PowerEasy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

CVE-2006-5918

creationtimestamp| type| source ---|---|--- 2010-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12272...

CVE-2006-2439

creationtimestamp| type| source ---|---|--- 2010-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12053 2010-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14433...

Farsi News 3.0 Backup Disclosure

======================================================================================== | Title : Farsi News 3.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://dl.p30vel.ir/scripts/[email protected]...

Low: Red Hat Security Advisory: sendmail security and bug fix update

Updated sendmail packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the DBMSEXPORTEXTENSION.GETDOMAININDEXMETADATA package. Note: This module has been tested against 9i, 10gR1 and 10gR2. This module requires Metasploit: https://metasploit.com/download Current source:...

Oracle Database Server SYS.DBMS_METADATA_UTIL Package SQL Injection (CVE-2006-0260)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. VID c97d7a37-2233-11df-96dd-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID c97d7a37-2233-11df-96dd-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Microsoft PowerPoint PPT File Parsing Memory Corruption (CVE-2006-3656)

There exists a memory corruption vulnerability in Microsoft PowerPoint. The flaw is caused due to an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the current...

Mozilla Firefox DOMNodeRemoved Memory Corruption (CVE-2006-2779)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser is capable of interpreting various HTML specifications, as well as client side scripting models and languages. A memory...

Debian DSA-2006-1 : sudo - several vulnerabilities

Several vulnerabilities have been discovered in sudo, a program designed to allow a sysadmin to give limited root privileges to users. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0426 It was discovered that sudo when a pseudo-command is enabled,...

WinACE RAR and TAR Directory Traversal (CVE-2006-0981)

WinACE Archiver is an application that can compress to and decompress from various archive formats. The compression mainly supports ACE, LZA, MS-CAB, ZIP archive formats, however the decompression support includes a wider range of compression formats including TAR, RAR, and others. There exists a...

Microsoft Excel Malformed OBJECT Record Code Execution (MS06-037; CVE-2006-1306)

There exists an arbitrary index pointer code execution vulnerability in Microsoft Excel. The flaw is caused by an insufficient check of a malformed OBJECT Record in an Excel file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the...

F-Secure Products Web Console Buffer Overflow (CVE-2006-2838)

F-Secure Corporation is an established developer of many anti-virus and security-related products. Two of the products provided by F-Secure can be deployed in enterprise environments and managed through a web interface. The web interface allows an administrator access to a console, through which ...