Lucene search
+L

6739 matches found

The Hacker News
The Hacker News
•added 2010/12/14 1:01 p.m.•28 views

Free phone Calls To Land-line And Cellphones Anywhere In the World

There have been many services offering free international VOIP calls and most of them rely upon ad-supported funding to get things going, most of such services have closed there doors but there are still a few left. One such service Evaphone allows users to enjoy free international PC-To-Phone...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2010/12/01 10:21 p.m.•12 views

kernel: prevent heap corruption in snd_ctl_new()

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

4.7CVSS6.1AI score0.00395EPSS
SaveExploits0References4
Prion
Prion
•added 2010/11/29 4:00 p.m.•34 views

Design/Logic Flaw

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the 1 mos7720ioctl function in...

1.9CVSS6AI score0.0038EPSS
SaveExploits0References13Affected Software2
Prion
Prion
•added 2010/11/29 4:00 p.m.•33 views

Code injection

The waitforunixgc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service system hang via crafted use of the socketpair and sendmsg system...

4.9CVSS6.5AI score0.00888EPSS
SaveExploits3References23Affected Software2
Cvelist
Cvelist
•added 2010/11/29 3:00 p.m.•40 views

CVE-2010-4074

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the 1 mos7720ioctl function in...

6.9AI score0.0038EPSS
SaveExploits0References13
zdt
zdt
•added 2010/11/27 12:00 a.m.•24 views

os-x/x86 intel - setuid shell x86_64 - 51 bytes

Exploit for os-x/x86 platform in category shellcode ========================================== OSX/Intel - setuid shell x8664 - 51 bytes ========================================== / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Versio...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2010/11/26 12:00 a.m.•6 views

PT-2010-5109

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue allows man-in-the-middle attackers to make calls via a crafted URL in an ad, specifically affecting the iAd Content Display in Apple iOS. Recommendations For versions prior to 4.2, update t...

4.3CVSS0.0102EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/26 12:00 a.m.•5 views

CVE-2010-3828: Undefined Security Weakness

iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad...

4.3CVSS5.8AI score0.0102EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2010/11/25 12:00 a.m.•38 views

OSX/Intel - setuid shell x86_64 - 51 bytes

OSX/Intel - setuid shell x8664 - 51 bytes. Shellcode exploit for osx platform / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text globa...

7.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2010/11/25 12:00 a.m.•11 views

DCE-RPC Big Endian Evasion Technique

DCE/RPC stands for "Distributed Computing Environment / Remote Procedure Calls". It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having...

5AI score
SaveExploits0
Debian
Debian
•added 2010/11/23 5:28 p.m.•77 views

BSA-011 Security Update for znc

Patrick Matthäi pmatthaei uploaded new packages for znc which fixed the following security problems: CVE-2010-2934 Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service exception and daemon crash via unknown vectors related to "unsafe substr calls."...

5CVSS5.8AI score0.03164EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2010/11/19 1:31 a.m.•18 views

Free Skype incoming numbers in 36 countries !!

In spite of the numerous issues with Skype, Skype continues to dominate the VoIP space. The problem with the closed nature of Skype is that it is extremely difficult or costly to reach Skype contacts from outside Skype. Currently, Skype provides SkypeIN, wherein you can buy a virtual number for...

6.5AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2010/11/17 3:14 p.m.•20 views

Mozilla cross-site information disclosure via modal calls

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which...

5.8CVSS7.4AI score0.01398EPSS
SaveExploits1References4
NVD
NVD
•added 2010/11/16 10:00 p.m.•33 views

CVE-2010-3784

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service NULL pointer dereference and application crash via unspecified API calls...

5CVSS6AI score0.01588EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2010/11/16 9:00 p.m.•55 views

CVE-2010-3784

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service NULL pointer dereference and application crash via unspecified API calls...

8.5AI score0.01588EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2010/11/10 7:00 p.m.•17 views

Mozilla cross-site information disclosure via modal calls

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which...

5.8CVSS7.4AI score0.01398EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2010/11/10 7:00 p.m.•14 views

kernel: prevent heap corruption in snd_ctl_new()

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

4.7CVSS6.1AI score0.00395EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2010/11/09 12:00 a.m.•143 views

nSense-2010-003: Cisco Unified Communications Manager

nSense Vulnerability Research Security Advisory NSENSE-2010-003 --------------------------------------------------------------- Affected Vendor: Cisco Systems, Inc Affected Product: Cisco Unified Communications Manager Platform: All Impact: Privilege Escalation Vendor response: Patch. IntelliShie...

6.8CVSS6.3AI score0.08605EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2010/11/05 12:00 a.m.•52 views

Cisco Unified Communications Manager Privilege Escalation

nSense Vulnerability Research Security Advisory NSENSE-2010-003 --------------------------------------------------------------- Affected Vendor: Cisco Systems, Inc Affected Product: Cisco Unified Communications Manager Platform: All Impact: Privilege Escalation Vendor response: Patch. IntelliShie...

6.8CVSS0.9AI score0.08605EPSS
SaveExploits3
securityvulns
securityvulns
•added 2010/11/04 12:00 a.m.•71 views

Broadsoft BroadWorks information leak

Incoming and outgoing calls inrofmation is available without authentication...

1.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder