CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...

CVE-2014-4040

The CVE-2014-4040 issue affects powerpc-utils, where the snap utility can generate an archive containing fstab and yaboot.conf with cleartext passwords. This could allow local/remote exposure of sensitive data if an attacker gains access to the archive via a data stream. Red Hat and SUSE advisori...

NJStart Communicator MiniSmtp Buffer Overflow [ASLR Bypass]

Exploit for windows platform in category dos / poc Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7 Ultimate...

NJStar Communicator MiniSmtp - Buffer Overflow (ASLR Bypass)

NJStar Communicator MiniSmtp - Buffer Overflow ASLR Bypass Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7...

NJStar Communicator MiniSmtp - Buffer Overflow (ASLR Bypass)

Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7 Ultimate CVE:2011-4040 ! /usr/local/bin/python import socket...

CVE-2011-4040

CVE-2011-4040 affects NJStar Communicator MiniSMTP Server (MiniSmtp) 3.0.11818. A boundary/buffer overflow in the MiniSMTP server when processing crafted packets allows remote code execution. Documents consistently describe the impact as arbitrary code execution with likely administrative privile...

NJStar Communicator MiniSMTP Server Remote Stack Buffer Overflow Vulnerability

NJStar Communicator MiniSMTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4040

creationtimestamp| type| source ---|---|--- 2011-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18057 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/njstarsmtpbof.rb 2025-02-06 03:13:40+00:00| seen|...

Debian: Security Advisory (DSA-2188-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2188-1 : webkit - several vulnerabilities

Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. VID 35ecdcbe-3501-11e0-afcd-0015f2db7bde OpenVAS Vulnerability Test $ Description: Auto generated from VID 35ecdcbe-3501-11e0-afcd-0015f2db7bde Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Google Chrome multiple vulnerabilities - October 10(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

CVE-2010-4040

CVE-2010-4040 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from improper handling of animated GIF images, enabling a remote attacker to trigger memory corruption which can lead to a denial of service and potentially other impacts. The available details describe memory corru...

CVE-2009-4040

CVE-2009-4040 affects phpMyFAQ prior to 2.0.17 and 2.5.x prior to 2.5.2. It is a cross-site scripting (XSS) vulnerability on the search page triggered by unsanitized input, notably with IE6/IE7. Root cause: insufficient input sanitization on search parameters. Impact: remote attacker can inject s...

Mandriva Update for kernel MDKSA-2007:078 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:078 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1

Ubuntu Update for Linux kernel vulnerabilities USN-486-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4861.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1

Ubuntu Update for Linux kernel vulnerabilities USN-489-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerability (USN-489-1)

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

Ubuntu 6.10 : linux-source-2.6.17 vulnerabilities (USN-486-1)

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...