CVE-2012-1391

Unspecified vulnerability in the mOffice - Outlook sync com.innov8tion.isharesync application 3.1 for Android has unknown impact and attack vectors...

CVE-2012-1098 rubygem-activesupport: XSS in SafeBuffer#[] (unescaped safe buffers can be marked as safe)

Cross-site scripting XSS vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods...

CVE-2012-1008

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service daemon crash via a crafted To header in a SIP INVITE message...

CVE-2012-1008

CVE-2012-1008 affects OfficeSIP Server 3.1. A remote attacker can trigger a denial-of-service (daemon crash) by sending a SIP INVITE with a crafted To header. The available documents confirm the affected product and the impact but do not provide additional details on root cause, exact vulnerable ...

CVE-2012-1008

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service daemon crash via a crafted To header in a SIP INVITE message...

Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities

Binary data 6309.prm...

OfficeSIP Server 3.1 - Denial of Service

OfficeSIP Server 3.1 - Denial of Service Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...

OfficeSIP Server 3.1 Denial Of Service Vulnerability

Exploit for windows platform in category dos / poc Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...

Thunderbird 3.1 < 3.1.18 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 3.1 is earlier than 3.1.18. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...

Savant Web Server 3.1 - Denial of-Service (PoC)

!/usr/bin/python import socket import sys from struct import pack try: server = sys.argv1 port = 80 size = 260 httpMethod = b"GET /" inputBuffer = b"\x41" size httpEndRequest = b"\r\n\r\n" buf = httpMethod + inputBuffer + httpEndRequest print"Sending evil buffer..." s = socket.socketsocket.AFINET...

CVE-2011-4319

Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...

Cross site scripting

Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...

CVE-2011-4319

Cross-site scripting XSS vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the railsxss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string...

kernel: perf tools: may parse user-controlled configuration file

Untrusted search path vulnerability in the perfconfig function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory...

PT-2012-1690 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue is related to a buffer overflow in the fuse notify inval entry function, which can be exploited by local users to cause a denial of service, resulting in a system crash. This is achiev...

PT-2013-1401 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue is related to an untrusted search path vulnerability in the perf config function. This vulnerability allows local users to overwrite arbitrary files by using a crafted config file in t...

Mozilla Thunderbird 3.1.x < 3.1.16 Multiple Vulnerabilities

The installed version of Thunderbird 3.1.x is earlier than 3.1.16 and is potentially affected by the following vulnerabilities: - There is an error within the JSSubScriptLoader that incorrectly unwraps 'XPCNativeWrappers'. By tricking a user into installing a malicious plug-in, an attacker could...

Trend Micro IWSS 3.1 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/50380/info Trendmicro IWSS is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with root privileges and completely compromise the affected computer. Trendmicro IWSS 3.1 is vulnerable;...

kernel: net: improve sequence number generation

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

MyBB MyStatus 3.1 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...