Microsoft Internet Explorer DOM编辑未初始化内存远程代码执行漏洞

Bugtraq ID: 48207 CVE ID：CVE-2011-1256 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 应用程序在多个JavaScipt修改文档的处理过程中存在缺陷。在某些情况下，应用程序会由于修改操作而释放对象，之后尝试销毁时会再次访问。重用可导致在应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0...

Cross-Site Scripting vulnerability in Icinga

Advisory: Cross-Site Scripting vulnerability in Icinga Advisory ID: SSCHADV2011-005 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.4.0 Vendor URL: http://www.icinga.org Vendor Status: Resolved CVE-ID: - ========================== Vulnerability Descriptio...

Google Chrome GPU命令缓冲区内存破坏漏洞

Bugtraq ID: 47964 CVE ID：CVE-2011-1806 Google Chrome是一款流行的WEB浏览器。 Google Chrome GPU命令缓冲区中存在一个内存破坏漏洞，远程攻击者可以构建恶意WEB页，诱使用户解析，可能以应用程序上下文执行任意代码。 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309...

Nagios 3.2.0 / 3.2.3 Cross Site Scripting

Advisory: Cross-Site Scripting vulnerability in Nagios Advisory ID: SSCHADV2011-002 Author: Stefan Schurtz Affected Software: Successfully tested on: nagios-3.2.0 / nagios-3.2.3 Vendor URL: http://www.nagios.org Vendor Status: ID 0000207: Cross-Site Scripting vulnerability in Nagios CVE-ID: -...

Qtweb Browser 3.5 Buffer Overflow

Title: Remote Buffer Overflow Qtweb Browser 3.5 Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.5 Tested on: Windows Author: PoisonCode Published: 2010-11-10 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | ...

Qtweb Browser 3.5 - Buffer Overflow

Title: Remote Buffer Overflow Qtweb Browser 3.5 Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.5 Tested on: Windows Author: PoisonCode Published: 2010-11-10 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | ...

CVE-2007-2175

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16295 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/qtjavapointer.rb 2025-02-06 03:13:38+00:00| seen|...

ZDI-10-149: Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability

ZDI-10-149: Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-149 August 10, 2010 -- CVE ID: CVE-2010-2188 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Flash...

About the security content of Safari 5.0.1 and Safari 4.1.1

About the security content of Safari 5.0.1 and Safari 4.1.1 Last Modified: July 28, 2010 Article: HT4276 Summary This document describes the security content of Safari 5.0.1 and Safari 4.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...

Microsoft Windows帮助和支持中心绕过白名单限制漏洞

BUGTRAQ ID: 40725,40721 CVE ID: CVE-2010-1885 Windows是微软发布的非常流行的操作系统。 Windows中默认提供了帮助和支持中心以访问在线文档，可通过hcp://形式的URL直接访问帮助文档。在通过注册的协议处理器调用hcp:// URL时，会向帮助中心应用传送命令行参数/fromhcp，这个标记将帮助中心切换到受限制的模式，仅允许白名单中的帮助文档和参数。但这个白名单实现并不安全，可能被绕过。 在进行验证之前首先要使用MPC::HTML::UrlUnescapeW函数规范化和转义URL，该函数使用MPC::HexToNum将...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

Multiple Vulnerabilities in Cisco Unified MeetingPlace

No description provided by source. Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Advisory ID: cisco-sa-20100127-mp Revision 1.0 For Public Release 2010 Jan 27 1600 UTC GMT +--------------------------------------------------------------------- Summary =======...

Red Hat Linux内核路由实现多个远程拒绝服务漏洞

Bugraq ID: 37875 CVE ID：CVE-2009-4272 Red Hat是一款流行的linux发行版本。 如果攻击者能够在路由哈希表中引起足够数量的碰撞如通过特殊构建的报文，以触发紧急路由刷新，可发生死锁现象，或者如果在内核路由缓存禁用的情况下，在路由查询后会遗留未初始化指针，触发空指针应用而发生上述现象。 RedHat Enterprise Linux EUS 5.4.z server RedHat Enterprise Linux Desktop 5 client RedHat Enterprise Linux 5 server 厂商解决方案...

FortiGuard Advisory: Microsoft Internet Explorer Remote Memory Corruption Vulnerability

Microsoft Internet Explorer Remote Memory Corruption Vulnerability 2010.January.21 Summary: ======== Fortinet's FortiGuard Labs has discovered a memory corruption vulnerability in Microsoft's Internet Explorer. Impact: ======= Remote Code Execution. Risk: ===== Critical Affected Software:...

Qtweb Browser v3.5 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================== Qtweb Browser v3.5 DLL Hijacking Exploit ======================================== Title: Qtweb Browser v3.5 DLL Hijacking Exploitwintab32.dll Software:http://www.qtweb.net/downloads/QtWeb-setup.exe...

Adobe Reader/Acrobat远程安全绕过漏洞

Bugraq ID: 37763 CVE ID：CVE-2009-3956 Adobe Reader/Acrobat是流行的处理PDF文件的应用程序。 默认的安全加强配置存在安全问题，允许脚本注入攻击。目前没有详细漏洞细节提供。 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 8.1.7 Adobe Reader 8.1.6 Adobe Reader 8.1.6 Adobe Reader 8.1.5 Adobe Reader 8.1.4 Adobe Reader 8.1.3 Adobe Reade...

PHP mbstring.func_overload Webserver本地拒绝服务漏洞

BUGTRAQ ID: 33542 CVE ID: CVE-2009-0754 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 运行在Apache上的PHP允许本地用户通过修改.htaccess中的mbstring.funcoverload设置来修改同一Web服务器上所承载的其他站点的行为，将设置应用到同一服务器的其他虚拟主机，导致无法正确的处理多字节字符串。 PHP PHP 5.1.6 PHP PHP 4.4.4 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://snaps.php.net/...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...

Adobe Flash Player ActiveX控件信息泄漏漏洞

Bugraq ID: 37272 CVE ID：CVE-2009-3951 Adobe Flash Player是一款Flash文件处理程序。 Flash Player ActiveX控件中漏洞，允许获得windows平台本地文件名，导致敏感信息泄漏。 攻击者可以构建恶意WEB页，诱使用户访问来触发。 Adobe Flex 3.0 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe...

Microsoft Windows LSASS服务ISAKMP消息远程拒绝服务漏洞（MS09-069）

BUGTRAQ ID: 37218 CVE ID: CVE-2009-3675 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统上的本地安全权威子系统服务（LSASS）没有正确地处理特制的ISAKMP消息，如果通过认证的远程攻击者在通过IPSEC协议与受影响系统上的LSASS通讯期间发送了特制的ISAKMP消息，就可以耗尽系统资源。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000...