CVE-2015-6678

Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via...

Google Chrome < 45.0.2454.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 45.0.2454.99. It is, therefore, affected by multiple vulnerabilities : - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. CVE-2015-5567, CVE-2015-5579 - A vector leng...

CVE-2014-6678

The Algeria Radio Android app (com.wordbox.algeriaRadio) version 2.5 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This affects the app’s ability to ensure secure TLS connectio...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 6678)

This update of flash-player fixes a security issue that could allow attackers to execute arbitrary code remotely. CVE-2012-1535 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

linux/x86 bind port to 6678 XOR encoded polymorphic shellcode 125 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 bind port to 6678 XOR encoded polymorphic shellcode 125 bytes ======================================================================= /...

SuSE 10 Security Update : libtool (ZYPP Patch Number 6678)

libtool: libltdl may load modules from the current working directory. CVE-2009-3736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-6678

The CVE-2008-6678 entry describes a SQL injection in QuickerSite 1.8.5, exploitable through the sNickName parameter in asp/includes/contact.asp during a profile action to default.asp. Remote attackers can execute arbitrary SQL commands. The public documents confirm the vulnerable component and in...

CVE-2007-6678

CVE-2007-6678 is rejected/not used; reference CVE-2007-6167 instead.

[SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 - ------------------------------------------------------------------------ Package : netrik Vulnerability :...

[Full-disclosure] [SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 -...

DEBIAN-CVE-2006-6678

The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-2006-6678

Summary: CVE-2006-6678 affects netrik prior to 1.15.5 (noted fixes in 1.15.4-1sarge1 per Debian DSA-1251-1). The edit_textarea function in form-file.c does not properly sanitize temporary filenames when editing textarea fields, enabling an attacker to inject shell metacharacters in the filename t...