1538 matches found
Adobe Reader PDF Document Metadata XML Bomb (APSB09-15; CVE-2009-2979)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A denial of service vulnerability has been discovered in Adobe Reader and Acrobat. The...
CVE-2009-2972
in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service memory consumption via unspecified vectors that trigger a "fork/exec bomb."...
apr-util billion laughs attack
The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...
The father of all bombs - another webdav fiasco
Apache moddav / svn Remote Denial of Service Exploit Google Dorks: inurl:svn inurl:trunk "powered by subversion version" Information on the bug XML Bomb: http://blog.didierstevens.com/2008/09/23/dismantling-an-xml-bomb/ Enjoy! -------------------------------------------------------------------...
Apache mod_dav / svn - Remote Denial of Service
furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / June 2009 Will exhaust all system memory Needs Authentication on normal DAV This can be especially serious stuff when used against svn subversion servers!! Svn might let the PROPFIND slip through without...
Apache mod_dav svn - Remote Denial of Service
Apache moddav svn - Remote Denial of Service furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / June 2009 Will exhaust all system memory Needs Authentication on normal DAV This can be especially serious stuff when used against svn subversion servers!! Svn might let t...
FAQ: Conficker time bomb ticks, but don't expect boom
By Elinor Mills, ZDNet News There’s been lots of hype about the fact that the latest variant of the Conficker worm is set to start communicating with other computers on the Internet on April 1 – like an April Fool’s Day time bomb with some mysterious payload. To help clear up some of the confusio...
FreeBSD Ports: gforge
The remote host is missing an update to the system as announced in the referenced advisory. VID d7cd5015-08c9-11da-bc08-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: gforge
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Unfixed XSS vulnerability at bomb-search.com
Security researcher xylitol, has submitted on 08/06/2008 a cross-site-scripting XSS vulnerability affecting bomb-search.com, which at the time of submission ranked 2139879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is...
Privilege escalation
Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the 1 Desktop directory on Windows or 2 Downloads directory on Mac OS X, and subsequently allows...
CVE-2008-2540
Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the 1 Desktop directory on Windows or 2 Downloads directory on Mac OS X, and subsequently allows...
CVE-2007-4577
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...
CVE-2007-4577
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...
CVE-2007-4577
CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...
“Revenge”weapons txt bomb in the making-vulnerability warning-the black bar safety net
Create a contains only one spacein order to reduce the file size, we all knowof a text file, named 3jie it. 2. Open the WORD document, this file drag and drop into the document. You can also click the markup document in the menu bar“Insert＼object”pop-up“Insert Object”dialog box, select...
Hacking tricks of teach you make a simple QQ bomb-vulnerability warning-the black bar safety net
Today for everyone to talk about a simple production of the QQ bomb regard, absolutely everyone with a look of schooling would! The first method is the use of compressed packets, the method I used to teach my sister used that method and play with her classmate, first of all, we first create a...
Alert! A web page malicious script effects code summary Delivery-vulnerability warning-the black bar safety net
The following code is only for study and research use, please do not use the deceased person, resulting in loss of I am not responsible for, Thank you! 1, format the hard disk object id="scr" classid="clsid:06290BD5-48AA-11D2-8 4 3 2-006008C3FBFC" /object script scr. Reset; scr...
Hack Tool the four basic factions-vulnerability warning-the black bar safety net
Speaking of these days of hackers, in fact, only less than 1‰is the real hacking-or find system, software, network vulnerabilities and the corresponding patches in order to remind the relevant personnel to repairthis is actually a“honker”, or the use of these online vulnerability to stolen...