3526 matches found
Microsoft Excel Malformed Column Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the user running the application. The attacker could leverage the issue to compromise affected computers. Technologies Affected...
Integrity Clientless Security (ICS) Update 3.7.116.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation
HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...
Outpost Firewall PRO 4.0 - Local Denial of Service
Outpost Firewall PRO 4.0 - Local Denial of Service source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash...
Outpost Firewall PRO 4.0 - Local Denial of Service
source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate...
Integrity Clientless Security (ICS) Update 3.7.104.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
Symantec (Multiple Products) - SymEvent Driver Local Denial of Service
Symantec Multiple Products - SymEvent Driver Local Denial of Service source: https://www.securityfocus.com/bid/20051/info Multiple Symantec products are prone to a local denial-of-service vulnerability. This issue occurs when attackers send malformed data to the 'SymEvent' driver. A local...
For MS06-0 of 4 0 of botnet attacks to reproduce jianghu-vulnerability warning-the black bar safety net
According to the ongoing track of the virus an anti-virus expert Introduction, In addition to targeting the MS06-0 4 0 the Windows Server service vulnerability, this latest round of virus attacks also make use of the Windows System of the other three worm holes. With the month of August to appear...
Novell Identity Manager - Arbitrary Command Execution
Novell Identity Manager - Arbitrary Command Execution source: https://www.securityfocus.com/bid/19688/info Novell Identity Manager is prone to an arbitrary command-execution vulnerability. A local attacker can exploit this issue to execute arbitrary commands with superuser privileges. Exploiting...
Snort 2.4.x - URIContent Rules Detection Evasion
Snort 2.4.x - URIContent Rules Detection Evasion source: https://www.securityfocus.com/bid/18200/info Snort is reportedly prone to a vulnerability that may allow malicious packets to bypass detection. A successful attack can allow attackers to bypass intrusion detection and to carry out attacks...
Snort 2.4.x - URIContent Rules Detection Evasion
source: https://www.securityfocus.com/bid/18200/info Snort is reportedly prone to a vulnerability that may allow malicious packets to bypass detection. A successful attack can allow attackers to bypass intrusion detection and to carry out attacks against computers protected by Snort. This...
Design/Logic Flaw
Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors...
Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass
Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...
Biz Mail Form 2.x - Unauthorized Mail Relay
source: https://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If successful, it becomes possible to abuse th...
Microsoft Windows COM Structured Storage Local Privilege Escalation Vulnerability
Description Microsoft Windows is reported prone to a local privilege escalation vulnerability when processing COM structured storage files. This issue may allow a local attacker to gain elevated privileges on a vulnerable computer. An attacker with local interactive access may craft an applicatio...
Vulnerabilities In Pablo Software Solutions FTP Service 1.2
Plaintext Password Vulnerability ------------------------------------ User info is stored in users.dat in plaintext. If the anonymous account is present it is by default the entire FTP server can be compromised ftp://somewhere/program files/pablo's ftp service/users.dat Default Anonymous Account...
PAFileDB SQL Injection Vulnerability & Ratings Cheat Fix
I recently found out that someone I knew was running this vuln application. After informing them it was vuln they were dissapointed at the fact that they could no longer use the program as the author has not supplied a fix. Anyway, here is a quick fix i threw together to take care of the problem...
Invision Power Board Plaintext Password Disclosure Vuln
Invision Power Board Plaintext Password Disclosure Vuln ------------------------------------------------------- Version: All? Problem: Invision Power Board gives an admin the option to create a pass protected forum. The problem with this is that the password is then stored in the cookie fully...
IE bookmark 'clever' feature not so clever after all
short: type the name of one of your bookmarksfavorites in the addressfield in IE, and IE will execute the bookmark. bit longer: its trivial to trick a user into accepting a bookmark for a popular site, uh, lets say www.hotmail.com .. or placing it yourself. effect: users wont be able to access...