Gentoo Security Advisory GLSA 201110-23 (mod_authnz_external)

The remote host is missing updates announced in advisory GLSA 201110-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

IpTools Tiny TCP/IP Servers Remote Buffer Overflow Vulnerability

IpTools is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5196

creationtimestamp| type| source ---|---|--- 2011-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18266...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

Stack overflow

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

CVE-2011-3322

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

Fedora 14 : dhcp-4.2.0-23.P2.fc14 (2011-10705)

This update fixes a pair of defects that could cause the server to halt upon processing certain packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Unfixed XSS vulnerability at www.agro.ku.ac.th

Security researcher Gamoscu, has submitted on 23/08/2011 a cross-site-scripting XSS vulnerability affecting www.agro.ku.ac.th, which at the time of submission ranked 22828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Kingsoft AntiVirus 2012 KisKrnl.sys Privilege Escalation

Kingsoft AntiVirus 2012 KisKrnl.sys = 2011.7.8.913 Local Kernel Mode Privilege Escalation Exploit Date: 2011-7-23 Author : MJ0011 Version: Kingsoft AntiVirus 2012 Tested on: Windows XP SP3 DETAILS: In KisKrnl.sys 's hook function of "NtQueryValueKey" , it directly write to the buffer of...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

MozillaThunderbird: Update to Thunderbird 3.1.11 (important)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...

Mozilla Firefox 5.0 DLL Hijacking Exploit(softokn3.dll)

Exploit for windows platform in category local exploits Title: Mozilla Firefox 5.0 DLL Hijacking Exploitsoftokn3.dll Software:www.mozilla-europe.org/es/ Version: 5.0 Tested on: Windows Author: PoisonCode Published: 2011-06-23 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | | | | / |...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related t...

i-doIT 0.9.9-4 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/...

DH Softwares Auth Bypass Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Unfixed Redirect vulnerability at www.shoutmix.com

Security researcher p0pc0rn, has submitted on 23/05/2011 a Redirect vulnerability affecting www.shoutmix.com, which at the time of submission ranked 11473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If y...

Java.com URL Redirect

================================== java.com | Arbitrary URL Redirect Vulnerability ================================== 1. VULNERABILITY DESCRIPTION - Arbitrary URL Redirect http://java.com/inc/BrowserRedirect1.jsp?locale=en&host=attacker.in Demo:...

Solaris 10 (x86) : 146859-01

SunOS 5.10x86: ssl patch. Date this patch was last updated by Sun : Mar/23/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/11/14. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Constructr CMS 3.03 - Arbitrary File Upload

Constructr CMS 3.03 - Arbitrary File Upload !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h4...

Web Wiz Forum - Injection

Web Wiz Forum - Injection Title : Web Wiz Forum Injection Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : [email protected] date : 23/3/2011 D0rk : i Powered by Web Wiz Forums category : Web Apps SQli Go To Site :- SQL injection Vulnerability...