CVE-2010-0223

Kingston DataTraveler BlackBox DTBB, DataTraveler Secure Privacy Edition DTSP, and DataTraveler Elite Privacy Edition DTEP USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captur...

CVE-2010-0228

Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key...

CVE-2010-0229

Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time...

CVE-2010-0224

SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

Information disclosure

The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...

CVE-2009-2626

The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...

CVE-2009-2626

The CVE-2009-2626 issue affects PHP 5.3.0, 5.2.10 and earlier, where zend_restore_ini_entry_cb in zend_ini.c allows a context-specific attacker to cause memory disclosure and PHP crashes by abusing ini_set and ini_restore. Connected advisories confirm this as a vulnerability in PHP’s ini_restore(...

CVE-2009-2626

The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare a variable, then using the inirestore function to restore the...

Code injection

Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents aka .scntoc file with a ScriptContent element, as demonstrated by code that loads the WScript.Shell ActiveX control...

Fedora 11 : kernel-2.6.30.9-96.fc11 (2009-11032)

Tue Nov 3 2009 Kyle McMartin 2.6.30.9-96 - fs/pipe.c: fix NULL pointer dereference CVE-2009-3547 - Sun Oct 25 2009 Chuck Ebbert 2.6.30.9-95 - Disable the stack protector on functions that don't have onstack arrays. - Thu Oct 22 2009 Chuck Ebbert 2.6.30.9-94 - Fix overflow in KVM cpuid code...

Samba 3.0.29 - 3.2.4 Arbitrary Memory Contents Information Disclosure Vulnerability

Samba is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; if...

Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl -w By ThE g0bL!N Download : http://www.softpedia.com/get/Internet/Servers/WEB-Servers/Techlogica-HTTP-Server.shtml Happy Ramadan And Happy eid use LWP::Simple; use LWP::UserAgent; print "\tTechlogica HTTP Server 1.03 Arbitrary File Disclosure...

Techlogica HTTP Server 1.03 - Arbitrary File Disclosure

Techlogica HTTP Server 1.03 - Arbitrary File Disclosure !/usr/bin/perl -w By ThE g0bL!N Download : http://www.softpedia.com/get/Internet/Servers/WEB-Servers/Techlogica-HTTP-Server.shtml Happy Ramadan And Happy eid use LWP::Simple; use LWP::UserAgent; print "\tTechlogica HTTP Server 1.03 Arbitrary...

Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ============================================================= Techlogica HTTP Server 1.03 Arbitrary File Disclosure Exploit ============================================================= !/usr/bin/perl -w By ThE g0bL!N Download :...

Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier

First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...

TCPDB 3.8 Contents Change

Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change Vulnerability Risk: Medium...

SugarCRM vulnerable to SQL injection

Overview SugarCRM contains a SQL injection vulnerability. SugarCRM is a customer relationship management CRM software. SugarCRM contains a SQL injection vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...