CVE-2009-5031

CVE-2009-5031 affects ModSecurity before 2.5.11. It mishandles single quotes in request parameter values in the Content-Disposition header of multipart/form-data requests, allowing remote attackers to bypass filtering and perform other attacks such as XSS. A fix is available in ModSecurity 2.5.11...

Linux Kernel Sendpage Local Privilege Escalation

Exploit for linux platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Linux Kernel Sendpage Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

CVE-2009-5030

CVE-2009-5030 affects OpenJPEG 1.3 through 1.5. The tcd_free_encode function in tcd.c can be triggered by crafted tile information in Gray16 TIFF images, causing insufficient memory allocation and leading to an invalid free, which may result in memory corruption, a denial of service, and possibly...

RedHat Update for openjpeg RHSA-2012:1068-01

Check for the Version of openjpeg OpenVAS Vulnerability Test RedHat Update for openjpeg RHSA-2012:1068-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openjpeg RHSA-2012:1068-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: Red Hat Security Advisory: openjpeg security update

Updated openjpeg packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openjpeg security update

1.3-8 - Apply patches for CVE-2009-5030, CVE-2012-3358 Resolves: 831561 - Include -DCMAKEINSTALLLIBDIR in cmake call; fixes FTBFS with recent versions of cmake...

RedHat Update for glibc RHSA-2011:1526-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2100

The CVE-2012-2100 issue affects the Linux kernel before 3.2.2, on x86 (and unspecified other) platforms, via the ext4_fill_flex_info function in fs/ext4/super.c. It allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and potentially cause a denial of service throu...

Fedora Update for gd FEDORA-2012-9314

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : gd-2.0.35-17.fc16 (2012-9314)

This is an update, that fixes insufficient input validation in gdGetColors. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 17 : gd-2.0.35-17.fc17 (2012-9298)

This is an update, that fixes insufficient input validation in gdGetColors. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Cross site request forgery (csrf)

WinRadius Server 2009 allows remote attackers to cause a denial of service crash via a long password in an Access-Request packet...

CVE-2012-3816

WinRadius Server 2009 allows remote attackers to cause a denial of service crash via a long password in an Access-Request packet...

GLSA-201206-34 : msmtp: X.509 NULL spoofing vulnerability

The remote host is affected by the vulnerability described in GLSA-201206-34 msmtp: X.509 NULL spoofing vulnerability A vulnerability have been discovered in msmtp. Please review the CVE identifier referenced below for details. Impact : A remote attacker might employ a specially crafted certifica...

PHP < 5.3.1 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

CVE-2009-0695

Summary of CVE-2009-0695: Wyse Device Manager (WDM) HAgent (hagent.exe) on 4.7.x allows remote commands without authentication, enabling an attacker with network access to obtain management access and trigger actions (e.g., power-off) via crafted queries (e.g., V52). Exploitation is demonstrated ...

CVE-2009-0693

CVE-2009-0693 concerns Wyse Device Manager (WDM) 4.7.x, where multiple buffer overflows allow remote code execution. Specifically, the issues involve HServer (hserver.dll) accepting a crafted User-Agent header and HAgent (hagent.exe) receiving unspecified input leading to overflow. The vulnerabil...

Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)

Wyse - Machine Remote Power Off Denial of Service Metasploit require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' =...