ZDI-11-312 : Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability

ZDI-11-312 : Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-312 October 27, 2011 -- CVE ID: CVE-2011-3221 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple...

msgid:[email protected][email protected]&[email protected]&folder=\\3APA3A\Bugtraq&subject=Related%20POC%20for%20JCE%20Joomla%20Extension%20<%3D2

After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is going to submit related POC for this issue in Perl and PHP after one month for educational purposes. PHP Version: ?php www.bugreport.ir AmnPardaz Security Research & Penetration Testing Group Title: Exploit for JCE...

OneOrZero AIMS Security Bypass and SQL Injection Vulnerabilities

OneOrZero AIMS is prone to a security-bypass vulnerability and an SQL- injection vulnerability. An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, bypass filtering, and modify the logic of SQL queries. OneOrZero AIMS 2.7.0 is affected; othe...

SDP-Downloader

SDP Download from http://sdp.ppona.com/ suffer a Remote Buffer Overflow because it fails while receinv Content-Type: video plus a long name this issue will allow an attacker to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition. from socket import import...

Fedora Update for thunderbird FEDORA-2011-11084

Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2011-11084 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for thunderbird-lightning FEDORA-2011-11084

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2011-11084 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-python2-extras FEDORA-2011-11084

Check for the Version of gnome-python2-extras OpenVAS Vulnerability Test Fedora Update for gnome-python2-extras FEDORA-2011-11084 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for xulrunner FEDORA-2011-11084

Check for the Version of xulrunner OpenVAS Vulnerability Test Fedora Update for xulrunner FEDORA-2011-11084 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Microsoft Remote Desktop Web Access Detection

Remote Desktop Web Access was detected on the remote web server. This application allows access to RemoteApp and Desktop Connection via a web browser. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55800; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22";...

HP Network Automation CVE-2011-2402跨站脚本漏洞

Bugtraq ID: 48922 CVE ID：CVE-2011-2402 HP Network Automation是一款自动化网络配置管理工具。 运行在Linux, Solaris和Windows平台下的HP Network Automation存在安全漏洞，允许攻击者进行跨站脚本攻击，攻击者可以获得敏感信息或劫持用户会话。 HP Network Automation 9.10 HP Network Automation 9.0 HP Network Automation 7.6 HP Network Automation 7.5 HP Network Automation 7.2...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

IW Messenger v3.5 - Persistent Input Validation Vulnerability

Document Title: =============== IW Messenger v3.5 - Persistent Input Validation Vulnerability Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 212 Product & Service Introduction: =============================== IWMessenger è un potente...

FactoryLink vrn.exe Opcode 9 Buffer Overflow

Exploit for windows platform in category remote exploits $Id: factorylinkvrn09.rb 12998 2011-06-21 21:08:57Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Nmap NSE net: iscsi-brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: oracle-brute

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1421

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...

CVE-2011-1421

EMC NetWorker 7.5.x (before 7.5.4.3) and 7.6.x (before 7.6.1.5) are affected when the client push feature is enabled. The issue is weak permissions set on an unspecified file, enabling local users to gain elevated privileges. Exploitation details are not provided in the sources. Remediation is to...

Microsoft DNS Resolution Remote Code Execution Vulnerability (2509553)

This host is missing a critical security update according to Microsoft Bulletin MS11-030. OpenVAS Vulnerability Test $Id: secpodms11-030.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft DNS Resolution Remote Code Execution Vulnerability 2509553 Authors: Veerendra GG Copyright: Copyright c 2011...