Oracle Patches Java Zero Day

Oracle has released its quarterly patch update, which includes fixes for nearly 200 vulnerabilities. The most notable bug fixed in this release is the Java zero day that’s been used in an ongoing attack campaign. The massive release from Oracle has patches for a long list of products, but the Jav...

Ubuntu: Security Advisory (USN-2590-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RuggedCom Rugged Operating System WEB接口拒绝服务漏洞

Bugtraq ID:66522 CVE ID:CVE-2014-2590 RuggedCom Inc罗杰康公司是世界领先的生产用于工业环境的高性能网络和通信设备的制造商。 RuggedCom Rugged Operating System系统中监听80端口的WEB服务器不正确处理用户提交的特制报文，允许攻击者提交特制的请求使WEB接口崩溃，此漏洞不影响HTTPS服务及交换功能。 0 RuggedCom Rugged Operating System v3.11 RuggedCom Rugged Operating System v3.11 for RS950G RuggedCom...

CVE-2014-2590

CVE-2014-2590 concerns Siemens RuggedCom ROS web management interface. The vulnerability stems from improper input validation in the HTTP handling of the device’s web server, allowing remote attackers to cause a denial-of-service (interface outage) via specially crafted HTTP packets. Affected pro...

Debian: Security Advisory (DSA-2590-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2590-1 : wireshark - several vulnerabilities

Bjorn Mork and Laurent Butti discovered crashes in the PPP and RTPS2 dissectors, which could potentially result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Crystal Reports CrystalPrintControl ActiveX Property Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Crystal Reports CrystalPrintControl - ActiveX ServerResourceVersion Property Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

CVE-2012-2590

CVE-2012-2590 affects ESCON SupportPortal Pro 3.0. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via an e-mail message body. Exploitation vectors include (1) a SCRIPT element, (2) crafted SRC on an IFRAME, (3) cra...

CVE-2012-2590

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20350...

UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities

This host is installed with UUSee UUPlayer and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpoduuseeuuplayeractivexmultcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ UUSee UUPlayer ActiveX Control Multiple Remote Code Execution Vulnerabilities...

CVE-2011-2590

CVE-2011-2590 affects UUSee UUPlayer ActiveX Control 6.0.0.1 (UUSee 2010 6.11.0609.2). The Play() method allows remote code execution by passing a UNC path in the MPlayerPath parameter, enabling application-context execution. OpenVAS entries also describe multiple remote code execution vulnerabil...

UUSee UUPlayer ActiveX控件多个远程代码执行漏洞

Bugtraq ID: 48975 CVE ID：CVE-2011-2589 CVE-2011-2590 UUSee是一款集P2P直播点播于一身的网络电视软件。 UUSee存在两个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当处理"SendLogAction"方法时UUPlayer ActiveX控件存在边界错误，通过提交超长参数可触发基于堆的缓冲区溢出。 -当处理"Play"方法时UUPlayer ActiveX控件存在输入验证错误，向"MPlayerPath"参数传递UNC路径可以应用程序上下文执行任意程序。 UUSee UUPlayer 6.0.0.1 厂商解决方案...

SAP Crystal Reports PrintControl.dll ActiveX Control Buffer Overflow (CVE-2010-2590)

A heap buffer overflow vulnerability exists in SAP Crystal Reports PrintControl.dll ActiveX Control. The vulnerability is due to a boundary error when parsing the ServerResourceVersion property. A remote attacker can leverage this issue by enticing a target user to open a malicious web page,...

CVE-2010-2590

Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value...

CVE-2010-2590

CVE-2010-2590 is a heap-based buffer overflow in the CrystalPrintControl ActiveX (PrintControl.dll 12.3.2.753) used by SAP Crystal Reports 2008 SP3 Fix Pack 3.2. The overflow is triggered by a long ServerResourceVersion property value, allowing remote code execution. Public material exists: Metas...

SAP Crystal Reports PrintControl.dll ServerResourceVersion buffer overflow

Added: 12/22/2010 CVE: CVE-2010-2590 BID: 45387 OSVDB: 69917 Background SAP Crystal Reports allows developers to design interactive reports from virtually any data source. Problem A buffer overflow vulnerability in the PrintControl.dll ActiveX control allows command execution when a user loads a...

Secunia Research: SAP Crystal Reports Print ActiveX Control Buffer Overflow

====================================================================== Secunia Research 14/12/2010 - SAP Crystal Reports Print ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2010-2590

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15733 2012-12-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23472 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-2590

CVE-2009-2590 describes an SQL injection vulnerability in the Hutscripts PHP Website Script, specifically affecting the showcategory.php component where the cid parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. The affected software is referenced as Hutscr...