CVE-2010-4557

Buffer overflow in the lmtcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted request to port 9001...

Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

CVE-2010-3538

Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than...

CVE-2010-3547

CVE-2010-3547 affects PeopleSoft FMS ESA - EX in Oracle PeopleSoft/JD Edwards Suite, specifically 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6. The vulnerability allows remote authenticated users to compromise confidentiality and integrity via unknown vectors. The Oracle October 2010 Critica...

CVE-2010-3528

Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 41, 9.0 Bundle 28, and 9.1 Bundle 4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-3521

CVE-2010-3521 pertains to Oracle’s PeopleSoft/JD Edwards suite, specifically the PeopleSoft Enterprise HCM ePay component. The issue is described as an unspecified vulnerability that, when exploiting remote authentication, could affect confidentiality and integrity of data in versions 9.0 to Payr...

[slackware-security] sudo redo

New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a directory permissions issue. These replacement packages restore the correct permissions to /var. Here are the details from the Slackware 13.1 ChangeLog:...

Brazip 9.0 - .zip Buffer Overflow (SEH)

Brazip 9.0 - .zip Buffer Overflow SEH !user/bin/python Brazip 9.0 .zip File BoF Poc SEH Homepage : www.brazip.com.br Version : 9.0 Tested Os : Windows XP SP1/SP3 EN Usage : $ Python Brazip-poc.py AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum :...

Brazip 9.0 (.zip File) Buffer Overflow (SEH)

Exploit for windows platform in category dos / poc ============================================ Brazip 9.0 .zip File Buffer Overflow SEH ============================================ !user/bin/python Brazip 9.0 .zip File BoF Poc SEH Homepage : www.brazip.com.br Version : 9.0 Tested Os : Windows XP...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...

Brazip 9.0 Buffer Overflow

!user/bin/python Brazip 9.0 .zip File BoF Poc SEH Homepage : www.brazip.com.br Version : 9.0 Tested Os : Windows XP SP1/SP3 EN Usage : $ Python Brazip-poc.py AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Advisory:...

Brazip 9.0 - '.zip' Buffer Overflow (SEH)

!user/bin/python Brazip 9.0 .zip File BoF Poc SEH Homepage : www.brazip.com.br Version : 9.0 Tested Os : Windows XP SP1/SP3 EN Usage : $ Python Brazip-poc.py AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Advisory:...

CVE-2010-2403

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-2378

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite CRM 9.0 Bundle 28 and CRM 9.1 Bundle 4 allows local users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile Mgr component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle 9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-2398

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle 12 allows remote authenticated users to affect confidentiality via unknown vectors...

Oracle WebLogic Server 10.3.3 - Encoded URL

source: https://www.securityfocus.com/bid/41620/info Oracle WebLogic Server is prone to a remote vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'Plugins for Apache, Sun and IIS web servers' privileges. This vulnerabili...

Adobe Products Remote Code Execution Vulnerability (Jun 2010) - Linux

Adobe products is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

flash-plugin: multiple security flaws (APSB10-14)

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166,...