Fultek WinTr Directory Traversal

Overview Researcher Daiki Fukumori of Cyber Defense Institute has identified a directory traversal vulnerability in Fultek’s WinTr SCADA application. Fultek was unable to validate this vulnerability and has not offered any mitigation plans. ICS-CERT has validated the vulnerability. This...

SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 8154)

MozillaFirefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6224)

Mozilla Firefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under...

CyberWarfare & Cyberwar [THN] - eZine Issue 010

Document Title: =============== CyberWarfare & Cyberwar THN - eZine Issue 010 References: =========== Mirror: http://www.vulnerability-lab.com/resources/documents/532.pdf Article: http://www.vulnerability-lab.com/getcontent.php?id=532 Source: http://news.thehackernews.com/THN-April2012.pdf Releas...

@Mail Open webmail client contains multiple vulnerabilities

Overview The @Mail Open 1.04 webmail client contains multiple vulnerabilities including; unrestricted upload of file with dangerous type CWE-434, relative path traversal CWE-23, external control of file name or path CWE-73, and information exposure CWE-200. Description The @Mail Open 1.04 webmail...

Non-Telnet Traffic Over Port 23

TCP Port 23 is normally used to transfer Telnet traffic. Non-Telnet traffic over this port may be used for malicious purposes...

e-Rapido 3.3.2 SQL Injection

In The Name Of Allah ============================================================================== e-Rapido v3.3.2 SQL Injuction ============================================================================== » Title : e-Rapido v3.3.2 SQL Injuction » Author : HackStorm » Email : [email protected]...

CVE-2008-1602

creationtimestamp| type| source ---|---|--- 2012-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18515 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/orbitdownloadfailedbof.rb 2025-02-06...

CVE-2012-1222

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

Stack overflow

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

CVE-2012-1222

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

Gentoo Security Advisory GLSA 201110-23 (mod_authnz_external)

The remote host is missing updates announced in advisory GLSA 201110-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

IpTools Tiny TCP/IP Servers Remote Buffer Overflow Vulnerability

IpTools is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5196

creationtimestamp| type| source ---|---|--- 2011-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18266...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

Stack overflow

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

CVE-2011-3322

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

Fedora 14 : dhcp-4.2.0-23.P2.fc14 (2011-10705)

This update fixes a pair of defects that could cause the server to halt upon processing certain packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Unfixed XSS vulnerability at www.agro.ku.ac.th

Security researcher Gamoscu, has submitted on 23/08/2011 a cross-site-scripting XSS vulnerability affecting www.agro.ku.ac.th, which at the time of submission ranked 22828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Kingsoft AntiVirus 2012 KisKrnl.sys Privilege Escalation

Kingsoft AntiVirus 2012 KisKrnl.sys = 2011.7.8.913 Local Kernel Mode Privilege Escalation Exploit Date: 2011-7-23 Author : MJ0011 Version: Kingsoft AntiVirus 2012 Tested on: Windows XP SP3 DETAILS: In KisKrnl.sys 's hook function of "NtQueryValueKey" , it directly write to the buffer of...