CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

CVE-2013-4548

The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet dat...

BlazeDVD 6.2 Buffer Overflow

!/usr/bin/perl Exploit Title: BlazeDVD 6.2 .plf Buffer Overflow SEH Date: 10-28-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: BlazeDVD 6.2 Software Link: http://www.videocharge.com/download/WatermarkMasterInstall.exe Version: 6.2.0.0 Tested On: Windows XP SP3 To...

BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: BlazeDVD 6.2 .plf Buffer Overflow SEH Date: 10-28-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: BlazeDVD 6.2 Software Link: Version: 6.2.0.0 Tested On: Windows XP SP3 To exploit, simply open blazesploit.plf file my $buffsize = 10000;...

Design/Logic Flaw

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Blue Coat ProxySG Core File Information Disclosure

The remote Blue Coat ProxySG device's SGOS self-reported version is 6.1.x earlier than 6.1.5.1 or 6.2.x earlier than 6.2.2.1. It is, therefore, potentially affected by an information disclosure vulnerability. Exported core files are unencrypted, contain sensitive information and could be used to...

OpenSSH LoginGraceTime / MaxStartups DoS

According to its banner, a version of OpenSSH earlier than version 6.2 is listening on this port. The default configuration of OpenSSH installs before 6.2 could allow a remote attacker to bypass the LoginGraceTime and MaxStartups thresholds by periodically making a large number of new TCP...

EAServer <= 6.3.1 / 6.2 Multiple Vulnerabilities

Binary data 6935.prm...

Fedora Update for kernel FEDORA-2013-2635

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-2635 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for kernel FEDORA-2013-1961

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-1961 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File Disclosure :...

Heap overflow

Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file...

Pure-FTPd v1.0.21 (centos 6.2, ubuntu 8.04) Crash PoC (Null Pointer Dereference)

Exploit for linux platform in category dos / poc Pure-FTPd Crash PoC Null Pointer Dereference, tested with pure-ftpd v1.0.21 centos 6.2, ubuntu 8.04 latest version v1.0.36 is not affected !! discovered by Kingcope email protected: grep seg /var/log/syslog Aug 13 13:55:28 ubuntu kernel: 226.791747...

Pure-FTPd 1.0.21 (CentOS 6.2 Ubuntu 8.04) - Null Pointer Dereference Crash (PoC)

Pure-FTPd 1.0.21 CentOS 6.2 Ubuntu 8.04 - Null Pointer Dereference Crash PoC Pure-FTPd Crash PoC Null Pointer Dereference, tested with pure-ftpd v1.0.21 centos 6.2, ubuntu 8.04 latest version v1.0.36 is not affected !! discovered by Kingcope root@ubuntu: grep seg /var/log/syslog Aug 13 13:55:28...

Pure-FTPd 1.0.21 (CentOS 6.2 / Ubuntu 8.04) - Null Pointer Dereference Crash (PoC)

Pure-FTPd Crash PoC Null Pointer Dereference, tested with pure-ftpd v1.0.21 centos 6.2, ubuntu 8.04 latest version v1.0.36 is not affected !! discovered by Kingcope root@ubuntu: grep seg /var/log/syslog Aug 13 13:55:28 ubuntu kernel: 226.791747 pure-ftpd4825: segfault at 00000000 eip 0804cd3b esp...

CVE-2012-0186

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

CVE-2012-0313

CVE-2012-0313 concerns glucose 2 prior to stage 6.2, with an XSS vulnerability that lets remote attackers inject arbitrary scripts via the RSS feed. The issue stems from improper processing of RSS feed output, enabling arbitrary script execution on the affected system. Connected sources identify ...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.209.el62.1 - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSCATR-messa.patch bz751312 - CVE: CVE-2011-4111 - Resolves: bz751312 CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSCATR message rhel-6.2.z...