CVE-2009-4997

CVE-2009-4997 affects gnome-power-manager 2.27.92. The issue is improper implementation of the lock_on_suspend and lock_on_hibernate settings, which could allow physically proximate attackers to access an unattended laptop via a resume action. This is described as a regression following an earlie...

CVE-2009-4898

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submi...

CVE-2009-4898

CVE-2009-4898 is a Cross‑Site Request Forgery (CSRF) vulnerability in TWiki prior to 4.3.2 that allows an attacker to hijack the authentication of arbitrary users for requests that update pages. The issue is documented as existing due to an insufficient fix for CVE-2009-1339, and multiple feeds (...

Fedora Update for kernel FEDORA-2010-13903

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-13903 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Cisco IOS Software WebVPN and SSLVPN Vulnerabilities - Cisco Systems

Cisco IOS software contains two vulnerabilities within the Cisco IOS WebVPN or Cisco IOS SSLVPN feature SSLVPN that can be remotely exploited without authentication to cause a denial of service condition. Both vulnerabilities affect both Cisco IOS WebVPN and Cisco IOS SSLVPN features: - Crafted...

Cisco Unified Communications Manager Express Vulnerability - Cisco Systems

Cisco IOS devices that are configured for Cisco Unified Communications Manager Express CME and the Extension Mobility feature are affected by a buffer overflow vulnerability. Successful exploitation of this vulnerability may result in the execution of arbitrary code or a denial of service DoS...

RedHat Update for ImageMagick RHSA-2010:0652-01

Check for the Version of ImageMagick OpenVAS Vulnerability Test RedHat Update for ImageMagick RHSA-2010:0652-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for bugzilla FEDORA-2010-13072

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ruby FEDORA-2010-13341

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ruby FEDORA-2010-13341

Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2010-13341 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

nginx v0.6.38 Heap Corruption Exploit

No description provided by source. !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole [email protected] Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: = 0.6.38, = 0.7.61 Tested on: BT4R1 running nginx 0.6.38 locally CVE: 2009-26...

RedHat Update for ImageMagick RHSA-2010:0653-01

Check for the Version of ImageMagick OpenVAS Vulnerability Test RedHat Update for ImageMagick RHSA-2010:0653-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Nginx 0.6.38 - Heap Corruption

Nginx 0.6.38 - Heap Corruption !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one wit...

CVE-2009-2629

creationtimestamp| type| source ---|---|--- 2010-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14830...

nginx v0.6.38 Heap Corruption Exploit

Exploit for linux platform in category remote exploits ===================================== nginx v0.6.38 Heap Corruption Exploit ===================================== !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link:...

Nginx 0.6.38 - Heap Corruption

!/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: offset At that point, merely dump the r; capture the value for the data pointer it'll be the one with "GET //../Aa0" and add 131 to...

CVE-2009-3743

Off-by-one error in the InsMINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a malformed TrueType font in a document that trigger an integer overflow and a...

CVE-2009-3743

Ghostscript prior to 8.71 is affected by an off-by-one error in the Ins_MINDEX function of the TrueType bytecode interpreter, allowing a remote attacker to execute arbitrary code or cause a denial of service via a malformed TrueType font (heap memory corruption). The issue (CVE-2009-3743) is cite...

CVE-2009-3743

Off-by-one error in the InsMINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a malformed TrueType font in a document that trigger an integer overflow and a...