CVE-2013-4344

Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command...

SimpleRisk 20130915-01 - Multiple Vulnerabilities

SimpleRisk 20130915-01 - Multiple Vulnerabilities 1. Advisory Information Title: SimpleRisk v.20130915-01 CSRF-XSS Account Compromise Advisory ID: RS-2013-0001 Date Published: 2013-09-30 2. Vulnerability Information Type: Cross-Site Request Forgery CSRF CWE-352, OWASP-A8, Cross-Site Scripting XSS...

SimpleRisk 20130915-01 Cross Site Request Forgery / Cross Site Scripting

Advisory Information Title: SimpleRisk v.20130915-01 CSRF-XSS Account Compromise Advisory ID: RS-2013-0001 Date Published: 2013-09-30 2. Vulnerability Information Type: Cross-Site Request Forgery CSRF CWE-352, OWASP-A8, Cross-Site Scripting XSS CWE-79, OWASP-A3 Impact: Full Account Compromise...

WordPress特制字符串URL重定向限制绕过漏洞

Bugtraq ID:62344 CVE ID:CVE-2013-4339 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志 WordPress在处理特制的字符串时存在重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，来绕过重定向限制，对目标用户进行网络钓鱼等攻击 0 WordPress 3.6 厂商解决方案 WordPress 3.6.1已经修改该漏洞，建议用户下载更新： http://codex.wordpress.org/Version3.6.1...

Update: Linksys EA2700, EA3500, E4200v2, EA4500 Unspecified unauthenticated remote access

----------------------------------------------------------------------------- Vulnerabilities: An unspecified bug can cause an unsafe/undocumented TCP port to open allowing for: - Unauthenticated remote access to all pages of the router administration GUI, bypassing any credential prompts under...

[SECURITY] [DSA 2695-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

Fedora 18 : kernel-3.7.8-202.fc18 (2013-2635)

CVE-2013-0290 net: infinite loop in skbrecvdatagram Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Oracle MySQL/MariaDB 不安全Salt生成安全绕过漏洞(CVE-2012-5627)

Bugtraq ID:56837 CVE ID:CVE-2012-5627 MySQL是一款开源关系型数据库管理系统。MariaDB是一个采用Maria存储引擎的MySQL分支版本。 MySQL处理密码salt值存在漏洞，当用户登录MySQL时，会生成Salt值用于防止密码猜测攻击。此salt值在会话开始时创建并用于整个会话，如果通过验证的攻击者使用MySQL "changeuser"命令尝试以其他用户登录，由于Salt已知，可导致密码猜测更有效率。 0 MySQL 5.5.19及其他版本 MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66 MariaDB...

PHPList SQL injection and cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Affected system: phplist phplist 2.10.17 Not affected system: phplist phplist 2.10.18 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 2 6 5 7 CVE ID: CVE-2 0 1 2-2 7 4 0 PHPList is a open source email campaign Manager. phpList 2.10. 1 8...

SuSE9 Security Update : Acrobat Reader (YOU Patch Number 10316)

This update fixes a buffer overflow in Acrobat Reader versions 5 and 7, where an attacker could execute code by providing a handmade PDF to the viewer. The Acrobat Reader 5 versions of 9.1 and 9.2 were upgraded to Acrobat Reader 7. This version upgrade can cause new dependencies to appear, please...

KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; us...

Apache 'mod_fcgid'模块 2.3.6 拒绝服务漏洞

Bugtraq ID: 52565 CVE ID：VE-2012-1181 modfcgid是一个跟modfastcgi兼容的Apache module modfcgid 2.3.6没有正确处理配置在VirtualHost中的FcgidMaxProcessesPerClass参数引入的一个回溯可导致FcgidMaxProcessePerClas不起作用，攻击者可以利用漏洞对模块进行拒绝服务攻击 0 Apache Software Foundation modfcgid 2.3.6 厂商解决方案 Apache ----- Apache Software Foundation modfcgi...

ZDI-12-038 : Oracle Java JavaFX Arbitrary Argument Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-038 : Oracle Java JavaFX Arbitrary Argument Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-038 February 22, 2012 - -- CVE ID: - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Oracle - --...

CVE-2012-0003

creationtimestamp| type| source ---|---|--- 2012-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18426 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms12004midi.rb 2025-02-06 03:13:40+00:00| seen|...

JBoss Cache 'NonManagedConnectionFactory.java'本地信息泄露漏洞

Bugtraq ID: 51392 CVE ID：CVE-2012-0034 JBoss Cache是针对Java应用的企业级集群解决方案，其目的是通过缓存需要频繁访问的Java对象，提高应用的可用性并大幅度提升应用的整体性能。 JBoss Cache存在安全漏洞，允许本地用户获得敏感信息。 当连接失败时，"getConnection"函数jboss/cache/loader/NonManagedConnectionFactory.java会把用户名和密码记录到日志文件中，本地攻击者可以访问日志信息获得敏感验证信息。 0 JBoss Cache 3.2.8.GA 厂商解决方案...

Linux kernel 2.6.x 'SG_IO IOCTL' SCSI请求本地特权提升漏洞

Bugtraq ID: 51176 CVE ID：CVE-2011-4127 Linux是一款开放源代码的操作系统。 Paolo Bonzini发现主机linux系统允许在分区或LVM卷上执行SGIO ioctl，并允许向底层块设备传递命令。这可进一步在虚拟化上下文利用，因为virtio磁盘通过SGIO ioctl支持有限的SCSI直通。如果分区上或LVM卷上的virtio磁盘设置为format=raw，类似sgdd的工具可用于读和写相同磁盘上的其他数据，即便这些数据属于宿主机或其他guest。 0 Linux kernel 2.6.x 厂商解决方案...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Advisory ID: INFOSERVE-ADV2011-09 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID:...

Pidgin OSCAR协议UTF-8消息拒绝服务漏洞

Bugtraq ID: 51010 CVE ID：CVE-2011-4601 Pidgin是一款多协议即时通信软件。 当接收到相关请求或接收增加好友到好友列表中的授权的各种消息时，oscar协议插件不正确校验UTF-8的某一个段文字，在某些情况下，非法的UTF-8数据可导致应用程序崩溃。 Pidgin Pidgin 2.9 Pidgin Pidgin 2.8 Pidgin Pidgin 2.7.6 Pidgin Pidgin 2.7.5 Pidgin Pidgin 2.7.4 Pidgin Pidgin 2.7.3 Pidgin Pidgin 2.7.2 Pidgin Pidgin...

Oracle Java Applet Rhino脚本引擎远程代码执行漏洞

Bugtraq ID: 50218 CVE ID：CVE-2011-3544 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Java处理Rhino JavaScript错误存在缺陷，Java中的内置javascript引擎没有对javascript错误对象执行充分过滤，结果导致不可信代码以特权上下文运行 Sun SDK Windows Production Release 1.4.2 24 Sun SDK Windows Production Release 1.4.2 15 Sun SDK Windows...