243 matches found
PT-2014-6923
Name of the Vulnerable Software and Affected Versions AllDealsAsia All Deals ADA app version 4.2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...
CVE-2014-5938: Undefined Security Weakness
The AllDealsAsia All Deals ADA app aka com.ada.deals application 4.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2012-1035
AdaCore Ada Web Services (AWS) before 2.10.2 is affected by a denial-of-service vulnerability where hash values for form parameters can be triggered to collide predictably, leading to CPU exhaustion under crafted input. The issue stems from how AWS computes hashes for form parameters and can be e...
CVE-2012-1035: Improper Input Validation
AdaCore Ada Web Services AWS before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...
PT-2012-3033
Name of the Vulnerable Software and Affected Versions AdaCore Ada Web Services AWS versions prior to 2.10.2 Description The issue allows remote attackers to cause a denial of service by sending many crafted parameters, resulting in CPU consumption due to hash collisions. Recommendations For...
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-065 February 8, 2011 -- CVE ID: CVE-2011-0567 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Reader -- Vulnerability...
RedHat Update for gcc RHSA-2011:0025-01
Check for the Version of gcc OpenVAS Vulnerability Test RedHat Update for gcc RHSA-2011:0025-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Low: Red Hat Security Advisory: gcc security and bug fix update
Updated gcc packages that fix two security issues and several compiler bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Ada Image Server 0.6.6 SEH Overwrite
!/usr/bin/python Only usable module with safeseh disabled on XP SP2 and XP SP3 is imgsrv.exe. However, it contains a null character in the address ex: XP SP3 = 00689aff. Versions above 0.6.7 do not seem to be vulnerable. $ ./imgsrv.py 192.168.1.146 Ada Image Server v0.6.6 SEH Overwrite...
Ada Image Server <= 0.6.7 imgsrv.exe Buffer Overflow
Exploit for unknown platform in category remote exploits ==================================================== Ada Image Server 00689aff. Versions above 0.6.7 do not seem to be vulnerable. $ ./imgsrv.py 192.168.1.146 Ada Image Server v0.6.6 SEH Overwrite Discovered/Exploited by Blake Tested on XP...
Ada Image Server 0.6.7 - imgsrv.exe Remote Buffer Overflow
Ada Image Server 0.6.7 - imgsrv.exe Remote Buffer Overflow !/usr/bin/python Only usable module with safeseh disabled on XP SP2 and XP SP3 is imgsrv.exe. However, it contains a null character in the address ex: XP SP3 = 00689aff. Versions above 0.6.7 do not seem to be vulnerable. $ ./imgsrv.py...
Ada Image Server <= 0.6.7 imgsrv.exe Buffer Overflow
No description provided by source. !/usr/bin/python Only usable module with safeseh disabled on XP SP2 and XP SP3 is imgsrv.exe. However, it contains a null character in the address ex: XP SP3 = 00689aff. Versions above 0.6.7 do not seem to be vulnerable. $ ./imgsrv.py 192.168.1.146 Ada Image...
Ada Image Server 0.6.7 - 'imgsrv.exe' Remote Buffer Overflow
!/usr/bin/python Only usable module with safeseh disabled on XP SP2 and XP SP3 is imgsrv.exe. However, it contains a null character in the address ex: XP SP3 = 00689aff. Versions above 0.6.7 do not seem to be vulnerable. $ ./imgsrv.py 192.168.1.146 Ada Image Server v0.6.6 SEH Overwrite...
Joomla com_surveymanager (stype) SQL Injection Vulnerability
No description provided by source. Joomla comsurveymanager SQL injection vulnerability - stype Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 19, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=-...
Double directory traversal in ImgSvr 0.6.21
Luigi Auriemma Application: Ada Image server ImgSvr http://adaimgsvr.sourceforge.net Versions: = 0.6.21 and SVN = 28 Platforms: Windows and nix Bug: directory traversal Exploitation: remote Date: 24 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug ...
Ada Image server directory traversal
Multiple directory traversal variants...
adaimage-traverse.txt
Luigi Auriemma Application: Ada Image server ImgSvr http://adaimgsvr.sourceforge.net Versions: From developer's website: "ImgSvr is a personal or corporate Embedded Picture Web Server that let's you efficiently browse digital pictures. Contrary to other gallery systems, imgsvr aimed to be an easy...
CVE-2007-3714
Directory traversal vulnerability in Ada Image Server ImgSvr 0.6.5 allows remote attackers to read arbitrary files via a .. dot dot in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE...
Directory traversal
Directory traversal vulnerability in Ada Image Server ImgSvr 0.6.5 allows remote attackers to read arbitrary files via a .. dot dot in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE...
CVE-2007-3714
CVE-2007-3714 is a directory-traversal vulnerability in Ada Image Server (ImgSvr). Wallet of details in connected sources shows that remote attackers could read arbitrary files via a .. sequence in the template parameter of the default URI, with affected versions including ImgSvr 0.6.5 and earlie...