SuSE 10 Security Update : kernel-debug (ZYPP Patch Number 6986)

This SUSE Linux Enterprise 10 SP3 kernel update for x8664 only fixes a severe regression introduced by the previous bugfix that would make some machines not boot due to iommu / AGP memory issues. The update also fixes several other bugs and the following security issue : - drivers/net/r8169.c in...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6460)

This update fixes a single critical security issues in the SUSE Linux Enterprise 10 SP 2 kernel. - A missing check in the MSGPROBE handling can be used to execute privileges to root. CVE-2009-2698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6641)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3238: The getrandomint function in drivers/char/random.c in the Linux kernel produces insufficiently random numbers, which allows attackers to...

Squid Proxy Invalid HTTP Request Denial of Service (CVE-2009-2621)

A denial of service vulnerability has been reported in Squid proxy server...

CVE-2012-2009

HP Performance Insight for Networks versions 5.3.x, 5.41, 5.41.001, and 5.41.002 contain multiple vulnerabilities that could allow remote authentication—privilege elevation, SQL injection, and cross-site scripting. HP’s bulletin (HPSBMU02775) indicates an available hotfix: apply 5.41.002 piweb HF...

Microsoft Windows HTTP Services Chunked Encoding Integer Overflow (MS09-013; CVE-2009-0086)

A remote code execution vulnerability has been reported in Microsoft Windows HTTP services...

CVE-2012-2422

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality...

CVE-2012-2422

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

This module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7. Using the application to open a specially crafted asx file, a buffer overflow may occur to allow arbitrary code execution under the context of the user. This module requires Metasploit: https://metasploit.com/download Curre...

Mac OS X OSX/Sabpab Trojan Detection

Using the supplied credentials, Nessus has found evidence that the remote Mac OS X host has been compromised by a Trojan in the OSX/Sabpab alternatively known as OSX/Sabpub family of Trojans. OSX/Sabpab is typically installed by means of a malicious Word document that exploits a stack-based buffe...

nweb 2009 system-chcklogin.asp SQL注入漏洞

No description provided by source...

Opera Web Browser Select Object Denial Of Service Vulnerability - Mac OS X

Opera Web Browser is prone to select object denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : ghostscript (ZYPP Patch Number 8063)

This update of ghostscript fixes two security issues : - Off-by-one error in the TrueType bytecode interpreter in Ghostscript in SUSE Linux Enterprise 10 and 11 products allows remote attackers to cause a denial of service heap memory corruption via a malformed TrueType font in a document...

Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)

A buffer overflow vulnerability has been reported in Sun Java SE Runtime Environment...

MS12-027: Description of the security update for Microsoft Commerce Server 2009: April 10, 2012

Describes the security update for Microsoft Commerce Server 2009 that was released on April 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-027. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

[SECURITY] [DSA 2443-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2443-1 [email protected] http://www.debian.org/security/ Dann Frazier March 26, 2012 http://www.debian.org/security/faq -...

Intuit Help System Heap Corruption / Memory Leak

Intuit Help System Protocol URL Heap Corruption and Memory Leak Derek Soeder [email protected] Reported to [email protected] on March 15, 2012; vendor did not respond. Reported to CERT on March 22, 2012; vendor did not respond. Responsible disclosure failed with error code 10060. Published:...

TFM MMPlayer (m3u/ppl File) Buffer Overflow

This module exploits a buffer overflow in MMPlayer 2.2 The vulnerability is triggered when opening a malformed M3U/PPL file that contains an overly long string, which results in overwriting a SEH record, thus allowing arbitrary code execution under the context of the user. Module Options msf use...

CVE-2009-5113

The CVE-2009-5113 entry describes a cross-site scripting (XSS) vulnerability in WebGlimpse, specifically in the wgarcmin.cgi component of WebGlimpse 2.18.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. The available sources (NVD/NVD m...