Fedora 17 : xen-4.1.3-7.fc17 (2012-19717)

A guest can cause xen to crash XSA-26, CVE-2012-5510 883082 An HVM guest can cause xen to run slowly or crash XSA-27, CVE-2012-5511 883084 An HVM guest can cause xen to crash or leak information XSA-28, CVE-2012-5512 883085 A PV guest can cause xen to crash and might be able escalate privileges...

Seventeen Design Cross Site Scripting / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: http://cyberpunk-ur0x.blogspot.com/ Exploit Title: Seventeen Design - SQL Injectio...

Mandrake Linux Security Advisory : Zope (MDKSA-2001:080)

A new Zope hotfix is available that fixes a problem with DTML scripting as described in the README.txt of Hotfix2001-09-28 : 'The issue involves the fmt attribute of dtml-var tags. Without this correction, Zope does not check security access to methods invoked through fmt. This issue could allow...

Conceptronic GrabnGo Network Storage - Directory Traversal

Conceptronic GrabnGo Network Storage - Directory Traversal Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability...

Admidio 2.3.5 Multiple security vulnerabilities

Exploit for php platform in category web applications Advisory: Admidio 2.3.5 Multiple security vulnerabilities Author: Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Vendor URL: http://www.admidio.org/ Vendor Status: fixed ========================== Vulnerability...

Gentoo Security Advisory GLSA 201206-28 (TeX Live)

The remote host is missing updates announced in advisory GLSA 201206-28. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

linux/x86 - execve("/bin/sh") - 28 bytes

/ Title: Linux x86 execve"/bin/sh" - 28 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 73 68 push $0x68732f2f 8048068: 68 2f 62 69 6e push $0x6e69622f 804806d: 89 e3 mov %esp,%e...

Maroc Telecom (HUAWEI Technologies) Exception handling

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 8154)

MozillaFirefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6224)

Mozilla Firefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under...

NetOp Remote Control Client 9.5 Buffer Overflow

This module exploits a stack-based buffer overflow in NetOp Remote Control 9.5. When opening a .dws file containing a specially crafted string longer then 520 characters will allow an attacker to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

HP-UX PHSS_41607 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 28

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 28 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to execute arbitrary code...

HP-UX PHSS_41606 : s700_800 11.X OV NNM7.53 PA-RISC Intermediate Patch 28

s700800 11.X OV NNM7.53 PA-RISC Intermediate Patch 28 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM running on Windows. The vulnerability could be exploited remotely to execute arbitra...

Unfixed XSS vulnerability at www.opera-guide.ch

Security researcher bastich, has submitted on 28/02/2012 a cross-site-scripting XSS vulnerability affecting www.opera-guide.ch, which at the time of submission ranked 1631802 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2015. It is...

Oracle Java Rhino Script Engine Code Execution

Added: 12/02/2011 CVE: CVE-2011-3544 BID: 50218 OSVDB: 76500 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Java...

Solaris 10 (x86) : 147989-01 (deprecated)

SunOS 5.10x86: gifload patch. Date this patch was last updated by Sun : Nov/28/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/20. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Unfixed XSS vulnerability at intranet.opec.org

Security researcher CyberBellona, has submitted on 28/11/2011 a cross-site-scripting XSS vulnerability affecting intranet.opec.org, which at the time of submission ranked 179643 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Adobe Flash Player ActionScript2 Stack Buffer Overflow (APSB11-28; CVE-2011-2457)

A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a memory allocation issue while handling malformed ShockWave files SWF. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded...

Adobe Flash Player Malformed ShapeRecords Memory Corruption (APSB11-28; CVE-2011-2452)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference while processing malformed ShapeRecords line segments. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an...

Adobe Flash Player Action Tag Buffer Overflow (APSB11-28; CVE-2011-2454)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking while checking the payload contents of an ActionDefineFunction2 tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page...