Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (1)

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption 1 Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4877 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction...

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (2)

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption 2 Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4878 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction...

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (2)

Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4878 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== Oracle Outside In Technology provides software...

Oracle Fusion Middleware Outside In Technology Component Denial of Service Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and other capabilities. oracle Outside In Technology is one of the software development...

Information disclosure

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony..level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by...

CVE-2013-3045

The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function...

CVE-2013-3986

CVE-2013-3986 affects IBM Lotus Sametime 8.5.2 and 8.5.2.1. The vulnerability allows remote attackers to cause a denial-of-service by crafting an Audio Visual (AV) session that crashes the WebPlayer Firefox extension. Public details indicate exploitation targets the Sametime WebPlayer plug-in dur...

CVE-2013-4600

Multiple cross-site scripting XSS vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to system/workplace/views/admin/admin-main.jsp or the 2 requestedResource parameter to system/login/index.html...

IBM Lotus Notes Client URL Handler Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "IBM Lotus Notes...

IBM Lotus Domino Cross Site Scripting and Buffer Overflow Vulnerabilities

IBM Lotus Domino Server is prone to cross-site scripting and buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Stack overflow

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

CVE-2011-3575

Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf...

CVE-2011-3576

IBM Lotus Domino 8.5.2 is affected by CVE-2011-3576, a cross-site scripting (XSS) vulnerability. The issue arises when an attacker can inject arbitrary script or HTML via the PanelIcon parameter in the fmpgPanelHeader ReadForm action to WebAdmin.nsf. Exploitation status is not detailed in the pro...

IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities - Windows

IBM Lotus Notes is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities (Windows)

This host has IBM Lotus Notes installed and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotusnotesmultbofvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

IBM Lotus Domino Cookie File Authentication Bypass Vulnerability

IBM Lotus Domino Server is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Lotus Domino iCalendar Remote Stack Buffer Overflow Vulnerability

IBM Lotus Domino Server is prone to remote stack buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

No description provided by source. !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic [email protected], Infigo IS http://www.infigo.hr/en/ use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718;...

CVE-2008-0127

CVE-2008-0127 affects McAfee E-Business Server (administration interface) versions 8.5.2 and earlier. The vulnerability arises from improper handling of oversized authentication packets, allowing an unauthenticated remote attacker to crash the service (DoS) and potentially execute arbitrary code....

McAfee E-Business Server Administration Client Length Remote DoS

McAfee E-Business Server, an enterprise tool for digitally encrypting and signing electronic files, is installed on the remote host. The Administration Agent component of the version of McAfee E-Business Server installed on the remote host reportedly fails to validate the length from a packet...