CVE-2011-2060

The platform-sw component on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 before 8.25.3, 8.3 before 8.32.20, and 8.4 before 8.42.1 does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service reloa...

FreeBSD-SA-11:03.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:03.bind Security Advisory The FreeBSD Project Topic: Remote packet Denial of Service against named8 servers Category: contrib Module: bind Announced: 2011-09-2...

Directory traversal

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

V5shop 8.2 version of the next pass to kill injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability to harm: the high-risk A vulnerability file: cart. aspx Search keywords: inurl:scoreindex. aspx exp: the /cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top...

V5shop injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability to harm: the high-risk A vulnerability file: cart. aspx Search keywords: inurl:scoreindex. aspx exp: the /cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top...

SeoPanel 3.0.0-Released Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

NEdit 5.5 Format String Vulnerability

Exploit for bsd platform in category local exploits Exploit Title: Format string vulnerability in Nedit = 5.5. Date: 04/13/2011 Author: Tosh The bug was already patched when I'd found the vuln Email: email protected Patch:...

NEdit 5.5 Format String Vulnerability

No description provided by source. Exploit Title: Format string vulnerability in Nedit = 5.5. Date: 04/13/2011 Author: Tosh The bug was already patched when I'd found the vuln Email: [email protected] Patch:...

NEdit 5.5 Format String

Exploit Title: Format string vulnerability in Nedit = 5.5. Date: 04/13/2011 Author: Tosh The bug was already patched when I'd found the vuln Email: [email protected] Patch: http://nedit.cvs.sourceforge.net/viewvc/nedit/nedit/source/preferences.c?r1=1.159&r2=1.160&view=patch Version: Nedit 5.5...

NEdit 5.5 - Format String

NEdit 5.5 - Format String Exploit Title: Format string vulnerability in Nedit = 5.5. Date: 04/13/2011 Author: Tosh The bug was already patched when I'd found the vuln Email: [email protected] Patch:...

Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

PostgreSQL for Microsoft Windows Payload Execution

Exploit for windows platform in category remote exploits $Id: postgrespayload.rb 12115 2011-03-23 21:24:09Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

Directory traversal

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Directory traversal

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

PT-2011-1636 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character. Recommendations: For versions prior ...

PT-2011-1632 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices with software prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by requesting a document whose name contains spac...

PT-2011-1627 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.23 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically block exhaustion, via EIGRP traffic that triggers an EIGRP multicas...

PT-2011-1308 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, specifically an ASDM syslog outage, by sending a long URL. Recommendations: For...

PT-2011-1633 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to bypass intended access restrictions by sending network traffic during device startup, as the device permits...